Re: [swinog] Disable Recursion on Windows Server 2019
split the resolver from authoritative service, and use Linux for user-facing services. What else :) On Mon, Nov 1, 2021 at 2:40 PM Benoît Panizzon wrote: > > Dear Community > > We have a customer who operates hosting and uses a Windows Server 2019 > as DNS for his hosting customers and for which we occasionally receive > complaints about this being an open resolver prone to DNS amplification > attacks. > > Customers requirements: > > * DNS reachable from the Internet, for the domains he is authoritative > for. > * DNS recursion available for hosting customers in his IP range. > > He tells me, that he can only switch recursion on and off completely, > but not restrict the ip ranges for which is shall be available. > > My quick search via Google, also only revealed how to turn recursion > off completely on a Windows Server 2019. > > Hopefully some Microsoft Guru on this list, can tell, how to restrict > recursive access to certain IP ranges? > > -- > Mit freundlichen Grüssen > > -Benoît Panizzon- @ HomeOffice und normal erreichbar > -- > I m p r o W a r e A G-Leiter Commerce Kunden > __ > > Zurlindenstrasse 29 Tel +41 61 826 93 00 > CH-4133 PrattelnFax +41 61 826 93 01 > Schweiz Web http://www.imp.ch > __ > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] OVH
I filed one fraud complaint over their web form, and never heard back. Maybe they aren't checking that either. On Mon, Apr 19, 2021 at 1:41 PM Benoît Panizzon wrote: > Hi List > > The main problem I observed with OVH and abuse from their network in > the past years, is that the did NOT monitor their abuse-desk email > addresses. I did not send emails to them them lately, so maybe that has > changed in the meantime. > > They required you to fill out an abuse complaint form on their website, > which is not useful for automated reports generated by tools like > fail2ban or spamtraps. > > I didn't observe a lot of abuse from their network lately, but in the > past it took some effort to get someone @ OVH to look at issues. > > -- > Mit freundlichen Grüssen > > -Benoît Panizzon- @ HomeOffice und normal erreichbar > -- > I m p r o W a r e A G-Leiter Commerce Kunden > __ > > Zurlindenstrasse 29 Tel +41 61 826 93 00 > CH-4133 PrattelnFax +41 61 826 93 01 > Schweiz Web http://www.imp.ch > __ > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Looking for a VoLTE-SIP gateway
Thanks Jean-Pierre, I ordered the beroNet box. It's pretty nice. A few issues with them, but in general they are solid boxes: -- OpenVPN of an old release, with some buggy TLS. Certificate-based authentication doesn't work because of that. Had to do shared-secret authentication. -- one "admin" account for GUI and API, impossible to add a separate API user. -- Problems with receiving SMS, I opened a support ticket. Probably it's because the LTE modules are relatively new. Voice over 3G and 4G works totally fine. On Fri, Aug 14, 2020 at 10:28 AM Jean-Pierre Schwickerath < swi...@hilotec.net> wrote: > Hi Stan > > You should take a look at the Beronet VoLTE SBC: > https://www.beronet.com/gateway/volte-sbc/ > > It does all you want, up to 6 SIM slots, SIP routing, SMS via REST-API and > there is an "app marketplace" where you can install OpenVPN as client or > server on the box. > > Feel free to contact me if you need someone to import one :-) > > > Best Regards > > Jean-Pierre > > > On 12.08.20 09:43, Stanislav Sinyagin wrote: > > hi all, > > Swisscom will discontinue the old GSM service soon, so I'll need to > replace an old gateway. > > Any recommendation will be appreciated. I'm looking for a ready-made voice > gateway, as follows: > > * 4 or 5 SIM card slots > * support for VoLTE and UMTS (in Swiss frequency bands) > * Voice calls routed via SIP > * API for receiving SMS > * Nice to have: support for OpenVPN or some other VPN. > > > thanks, > stan > > > > > -- > Stanislav Sinyagin > Senior Consultant, CCIE #5478 > ssinya...@k-open.com > +41 79 407 0224 > > ___ > swinog mailing > listswinog@lists.swinog.chhttp://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > > -- > HILOTEC Engineering + Consulting AG - Langnau im Emmental > IT für KMUs: Netzwerke, Server, PCs, Linux, Telefonanlagen, > VOIP, Hosting, Datenbanken, Entwicklung, WLAN, Cloud, Firewalls > Tel: +41 34 408 01 00 - https://www.hilotec.com/ > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Looking for a VoLTE-SIP gateway
cool, thanks, this looks nice. I'll ask them for a quote. Do you have them in operation? On Fri, Aug 14, 2020 at 10:28 AM Jean-Pierre Schwickerath < swi...@hilotec.net> wrote: > Hi Stan > > You should take a look at the Beronet VoLTE SBC: > https://www.beronet.com/gateway/volte-sbc/ > > It does all you want, up to 6 SIM slots, SIP routing, SMS via REST-API and > there is an "app marketplace" where you can install OpenVPN as client or > server on the box. > > Feel free to contact me if you need someone to import one :-) > > > Best Regards > > Jean-Pierre > > > On 12.08.20 09:43, Stanislav Sinyagin wrote: > > hi all, > > Swisscom will discontinue the old GSM service soon, so I'll need to > replace an old gateway. > > Any recommendation will be appreciated. I'm looking for a ready-made voice > gateway, as follows: > > * 4 or 5 SIM card slots > * support for VoLTE and UMTS (in Swiss frequency bands) > * Voice calls routed via SIP > * API for receiving SMS > * Nice to have: support for OpenVPN or some other VPN. > > > thanks, > stan > > > > > -- > Stanislav Sinyagin > Senior Consultant, CCIE #5478 > ssinya...@k-open.com > +41 79 407 0224 > > ___ > swinog mailing > listswinog@lists.swinog.chhttp://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > > -- > HILOTEC Engineering + Consulting AG - Langnau im Emmental > IT für KMUs: Netzwerke, Server, PCs, Linux, Telefonanlagen, > VOIP, Hosting, Datenbanken, Entwicklung, WLAN, Cloud, Firewalls > Tel: +41 34 408 01 00 - https://www.hilotec.com/ > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Looking for a VoLTE-SIP gateway
hi all, Swisscom will discontinue the old GSM service soon, so I'll need to replace an old gateway. Any recommendation will be appreciated. I'm looking for a ready-made voice gateway, as follows: * 4 or 5 SIM card slots * support for VoLTE and UMTS (in Swiss frequency bands) * Voice calls routed via SIP * API for receiving SMS * Nice to have: support for OpenVPN or some other VPN. thanks, stan -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] SwiNOG #27 & COVID-19 | Please fill in survey
looks like there needs to be a new poll, because this one is broken. I was also going to say "no", because the question looked like it was asking about on-site meeting only. On Mon, Jul 6, 2020 at 1:42 PM Jeroen Massar wrote: > > On 2020-07-06 12:13, Steven Glogger wrote: > > Hi community > > > > We’re currently in discussion if we will proceed with our SwiNOG #27 > > plans or if not… > > We would like to get your opinion. > > Please help us and provide an honest answer to our really short > > questinaire (will take 30sec to fill in): > > http://swinog.ch/covid/ > > > People be aware: > > If you select "no" on the first page ("Would you like to have a..."), > then you do not get to chose the multi selector which has more useful > options: > > - Remote: Join only if there is an remote / online session > - On-Site: Join personally on site I would not join online nor remote - > - I'll just watch the presentations and videos late… > - I am ok for on-site if COVID infection rates drop by this tim… > - Join Onsite, no live stream (otherwise less ppl attend,) if i… > > > I think most people would have selected on of those options if they > could: 70% said 'no' now and did not get to be represented in the second > chart which skews the results quite a bit. > > Also, keep that in mind when looking at the chart: 33 responses no, > while 10 of those could fill in the second chart, 23 did not get to see it. > > > I am good with remote session (though I tend to then just watch the ones > I am directly interested in to allow for questions/feedback, and watch > the rest at a later point). > > Greets, > Jeroen > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] SwiNOG #27 & COVID-19 | Please fill in survey
why not holding a virtual meeting? I can provide my paid Zoom account. Maybe 3-4 morning sessions, 2 hours each, would be a convenient format. On Mon, Jul 6, 2020 at 12:18 PM Steven Glogger wrote: > > Hi community > > We’re currently in discussion if we will proceed with our SwiNOG #27 plans or > if not… > We would like to get your opinion. > Please help us and provide an honest answer to our really short questinaire > (will take 30sec to fill in): > http://swinog.ch/covid/ > > greeings > > -steven > SwiNOG Core Member > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] ##### SwiNOG#36 - Travel Info #####
but maybe it's your calendar that is wrong, and Simon's is the reality. You never know On Wed, Nov 13, 2019 at 12:11 AM Jeroen Massar wrote: > > On 2019-11-12 21:51, Simon Ryf wrote: > > Dear SwiNOG Community, > > > > Please find general information about the SwiNOG #36 meeting below. > > > > https://www.swinog.ch/meetings/swinog36/ > > > > Date: 14.10.2018 - Registration 08h15 - 09h15 > > Back to the future! > > I can only assume 14.11.2019 aka 'tomorrow' (thursday). > > Greets, > Jeroen >(eating fresh homemade spanish croquetas de jamon serrano[1], thus > won't be bothering anybody there ;) > > [1] > https://spanishsabores.com/2011/10/12/croquetas-de-jamon-serrano-recipe-ham-croquettes/ > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] are you also seeing more ssh attacks ?
another way of protection is throttling down TCP SYN attempt rate per IP address. At least it will save you some CPU, as the SSH daemon won't have to process every request: https://txlab.wordpress.com/2013/06/29/protecting-a-vpbx-from-dos-attacks/ On Mon, Jul 2, 2018 at 11:25 AM, Tobias Oetiker wrote: > Good Morning > > are you running an ssh daemon on non standard ports to avoid some of the > drive-by-scanning ? we have been doing that for quite some time now with > great reduction of scanning noise ... since yesterday this has changed ... > we are getting a lot of connection attempts ... > > are you seeing this too ? is someone actively looking for ssh across the > whole port range or is this 'personal' ? > > cheers > tobi > > -- > Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland > www.oetiker.ch t...@oetiker.ch +41 62 775 9902 > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] emergency connection with a Huawei GSM modem ?
a PC Engines box with LTE modem, and OpenVPN toward your server. Then your server would receive SMTP and whatever, and forward to the office. I've got some spare hardware, can send out immediately. On Tue, Jun 12, 2018 at 11:56 AM, Per Jessen wrote: > Per Jessen wrote: > >> A customer with a flooded telephone cable is trying to re-establish >> the internet connection over a GSM modem - the mobile operator is >> Swisscom. >> He is not getting any inbound traffic, e.g. SMTP on port 25. I was >> just wondering if this might be blocked? > > Question answered, many thanks. Customer isn't much happier, but we're > working on that :-) > > > -- > Per Jessen, Zürich (19.0°C) > http://www.dns24.ch/ - your free DNS host, made in Switzerland. > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] OSS/BSS
I developed Gerty, sponsored by Swiss taxpayer money: https://github.com/ssinyagin/gerty It allows you to execute jobs on routers, and these jobs can also be service activation. At the moment it's mostly used for collecting data from the network via SNMP and SSH. Also there's a database that can store all service information and its relationship to physical hardware. but it lacks documentation. Data model: http://search.cpan.org/dist/SIAM/lib/SIAM/Documentation/DataModel.pod Hierarchical object database: https://github.com/ssinyagin/spsid-server Perl client library: https://github.com/ssinyagin/spsid-client Web GUI for data entry: https://github.com/ssinyagin/spsid-gui Also there's an integration of the above with monitoring systems and data display. lots of stuff to play around :) just my 2 cents :) On Fri, Apr 13, 2018 at 11:44 AM, Matthias Hertzog <m.hert...@mhs.ch> wrote: > Hi folks! > > Not really network related, but provisioning-related, which is somehow > network related as well... :-) > > What kind of OSS/BSS systems are you using in your companies? > Self-developed? Purchased? > > I need these informations for internal use only, without any names. If you > don't want to answer publicly, feel tree to e-mail me. > > To show openness in the topic: We use AGIS-OS at gga.ch (access services) > and a self-developed solution at mhs.ch (hosting and access). > > Thanks & have a nice day, > Matthias > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] PC Engines APU training material
hi, I was giving a training to some taxpayer-sponsored organization, and it's natural to give whatever is useful back to the public. Here is the slideshow about PC Engines hardware and applications: https://github.com/ssinyagin/pcengines-apu-debian-cd/tree/master/misc enjoy ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] new ip range 145.14.208.0/20
I don't think the network operators can do anyting. RIPE displays the network origin correctly. I guess you need to contact the GeoIP database maintainers, so that they refresh their data. This, for example: https://geoiptool.com/en/?ip=145.14.208.0 On Tue, Aug 29, 2017 at 8:54 AM, Philippe Maechler <plcmaech...@gmail.com> wrote: > Hi Swinog > > We (AS61174) have some problems with a newer ip range 145.14.208.0/20. > Customers are complaining that they access the content (e.g. Teleboy, > Swisscom TV, and many more) from Netherland and therefore the access is > denied. > > Can you check your filters and make sure that this range "belongs" to > switzerland? > > If you have any questions, please feel free to contact me offlist > > tia > > Philippe > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] using Git as a database back-end
hi all, I'm preparing a new release of Torrus software, and it will replace BerkeleyDB back-end with Git. It appears that libgit2 provides a new, a bit tricky in learning, but very efficient object storage, and change tracking is available out of the box. In general, you can read and write your data objects directly in the Git repository, without the need of checking in and out the files in your filesystem. Also the objects can be automatically compacted, and that allows storing millions of objects without too much load on the filesystem resources and inode count. Of course it's not a fully blown database, and not even something like MongoDB, but it really is usable and convenient for document storage systems. Here are few working examples of using libgit2 (particularly, with its Perl binding, but it's similar in other programming languages): https://github.com/ssinyagin/git_raw_excercise Also, the new Torrus branch, and changes document: https://github.com/ssinyagin/torrus-newfeatures/tree/v3 https://github.com/ssinyagin/torrus-newfeatures/blob/v3/src/doc/devdoc/v3_changes If there's interest in the topic, I will prepare a presentation for the next Swinog meeting. -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtueller Server mit IPv6 Blocks von schweizer Internet Telcos
definitely there are such places. To name a few, trenka.ch cyberlink.ch Also digitalocean.com has a datacenter in Frankfurt, which is not too far away. linode.com too 2016-11-17 14:27 GMT+01:00 LinuXperia <linuxpe...@gmx.ch>: > Hallo. > > Ich bin seit Tagen auf der Suche nach einem Virtuellen Linux Server > Angebot bei dem man zusätzlich noch IPv6 Adressen dazu kaufen bzw mieten > kann. > > Am liebsten wäre es mir wenn das von einem Schweizer Internet Telco > Anbieter angeboten wird. > > Ich habe schon das Angebot von Init7 auf Ihrer Webseite überprüft aber > könnte dort kein Virtueller Server Angebot finden. > > Habe darauf Green.ch angeschrieben die wiederum bieten keine Möglichkeit > weder IPv6 noch IPv4 Adressen dazukaufen zu können. > > > Antwort von green.ch zum Ticket [1006343-TT-359948] > > Bei unseren virtuellen Servern ist es nicht möglich, IPv6-Adressen > > dazu zu bestellen, die Konfigurationen sind fest gemäss den > > verfügbaren Daten auf der Website. > > Gibt es echt keinen schweizer Telco Anbieter in der Schweiz der solch ein > einfaches Angebot auf dem Markt für seine Kundschaft anbietet? > Kannst fast nicht glauben! > > Besten Dank für eure hilfreiche Antworten im voraus. > Freundliche Grüsse > LinUXperia > > -- > My DIY Hack Projects: > - > Eigenes Micro Linux Computer Betriebsystem: > http://www.ievs.ch/projects/index.php?page=microlinux > Primzahlen Generator: > http://www.ievs.ch/projects/index.php?page=primzahlengenerator > Spirulina Bio Reaktor > http://www.ievs.ch/projects/index.php?page=spirulina > > > _______ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Router installation in Morge
oh, that was Morges :) On Mon, Mar 14, 2016 at 11:31 AM, Stanislav Sinyagin <ssinya...@k-open.com> wrote: > hi, > > I need someone who could install a Cisco router in Morge on 17th of March. > This is a quick task, and the customer has already prepared the > configuration. > > Please contact me directly for details. > > > -- > Stanislav Sinyagin > Senior Consultant, CCIE #5478 > ssinya...@k-open.com > +41 79 407 0224 > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Router installation in Morge
hi, I need someone who could install a Cisco router in Morge on 17th of March. This is a quick task, and the customer has already prepared the configuration. Please contact me directly for details. -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] DNS Admin tool
Second that, and... Have a look at incognito.com Name Commander. It's a commercial tool that governs BIND servers. Another option would be to outsource the whole DNS service to a team which knows what they're doing :) On 6 Feb 2016 20:19, "Per Jessen"wrote: > Kägi Adrian wrote: > > > Hi Swinog > > I guess all of us is in touch to administrate DNS Servers. And I guess > > Bind will be a popular one. In our situation, different admins, with > > different skill make changes on zone files. And some guys (. I cannot > > understand why.), > > Anyone who has not managed to work with vi, should not be let near a > nameserver. > > > > -- > Per Jessen, Zürich (4.8°C) > http://www.dns24.ch/ - your free DNS host, made in Switzerland. > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Looking for an OOB ethernet link in ColoZueri Room 4.2
If there's a mobile signal, you can get away with a 3G modem and openvpn to go over mobile operator's NAT https://txlab.wordpress.com/tag/3g/ On 23 Jan 2016 13:41, "Andre Keller"wrote: > Dear fellow SwiNOGers, > > we from the CommunityRack.org association are looking for someone who > can provide us with an out-of-band ethernet link in ColoZueri Room 4.2. > > We need a single public IPv6 and/or IPv4 address on a copper ethernet > link that we can connect to our management jumphost. Other than SSH we > only do some puppet provisioning of the jumphost itself and some basic > keep-alive monitoring. So bandwidth usage on the link should be pretty > minimal (<100kbps). > > Anybody able to help us out? > > Cheers, > André > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Looking for an OOB ethernet link in ColoZueri Room 4.2
also sunrise offers the data sharing option, so that you can split your data contract between your phone and an additional SIM card, for CHF 5 per month. I also started with reverse SSH tunnel, but later switched to OpenVPN: it's easier to manage the certificates and routing, and the installation is quick and easy. On Sat, Jan 23, 2016 at 10:45 PM, Philippe Bonvin <p.bon...@edsi-tech.com> wrote: > Hello, > > > We use 3G usb keys for OOB access. > > > If one of you have a Swisscom mobile unlimited contrat, you can have 2Mb/s > for 9 CHF/month. > > We use a reverse SSH tunnel instead of OpenVPN with the help of autossh. > > > > -- > *From:* swinog-boun...@lists.swinog.ch <swinog-boun...@lists.swinog.ch> > on behalf of Stanislav Sinyagin <ssinya...@k-open.com> > *Sent:* Saturday, January 23, 2016 15:19 > *To:* Andre Keller > *Cc:* swinog@lists.swinog.ch > *Subject:* Re: [swinog] Looking for an OOB ethernet link in ColoZueri > Room 4.2 > > > If there's a mobile signal, you can get away with a 3G modem and openvpn > to go over mobile operator's NAT > > https://txlab.wordpress.com/tag/3g/ > On 23 Jan 2016 13:41, "Andre Keller" <a...@list.ak.cx> wrote: > >> Dear fellow SwiNOGers, >> >> we from the CommunityRack.org association are looking for someone who >> can provide us with an out-of-band ethernet link in ColoZueri Room 4.2. >> >> We need a single public IPv6 and/or IPv4 address on a copper ethernet >> link that we can connect to our management jumphost. Other than SSH we >> only do some puppet provisioning of the jumphost itself and some basic >> keep-alive monitoring. So bandwidth usage on the link should be pretty >> minimal (<100kbps). >> >> Anybody able to help us out? >> >> Cheers, >> André >> >> >> ___ >> swinog mailing list >> swinog@lists.swinog.ch >> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog >> > > [image: EDSI-Tech Sarl] <http://www.edsi-tech.com> > *Philippe Bonvin*, Directeur > *EDSI-Tech Sàrl <http://www.edsi-tech.com>* > EPFL Innovation Park, Batiment C, 1015 Lausanne, Suisse | Téléphone: +41 > (0) 21 566 14 15 > Savoie Technolac, 17 Avenue du Lac Léman, 73375 Le Bourget-du-Lac, France > | Téléphone: +33 (0)4 86 15 44 78 > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] UPC rejecting mails as spam?
hi, I didn't really dig through. Just indicating that your email ended up in spam :) On Thu, Dec 10, 2015 at 11:33 AM, Per Jessen <per.jes...@enidan.com> wrote: > Stanislav Sinyagin wrote: > >> your email ended up in my spam folder, and I'm using google mail. So, it >> looks like something is wrong with your sender host. >> >> Here's what I found in email headers: >> >> X-I7-Spam-score: -2.6 >> > > Hi Stanislav > > Unless I've completely misread it, it seems my mail got -2.6 points, can't > be that bad :-) > > Anyway, I'm not the one with a problem, it's UPC customer, a friend of > mine. > > > /Per > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] UPC rejecting mails as spam?
your email ended up in my spam folder, and I'm using google mail. So, it looks like something is wrong with your sender host. Here's what I found in email headers: X-I7-Spam-score: -2.6 X-I7-Spam-score_int: -25 X-I7-Spam-bar: -- X-I7-Spam-report: Spam detection software, running on the system "caiman.init7.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Does anyone @UPC happen to know what this means: host mx.hispeed.ch [213.46.255.2]: 552 5.2.0 rl4b1r00p3kCCMl01l4bgK automated process detected unsolicited content The email is being sent from a UPC connection, via Hostpoint (mail.hostpoint.ch) to a user @swissonline.ch. [...] Content analysis details: (-2.6 points, 5.0 required) pts rule name description -- -- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [88.198.198.124 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.] On Thu, Dec 10, 2015 at 10:30 AM, Per Jessen <per.jes...@enidan.ch> wrote: > Does anyone @UPC happen to know what this means: > > host mx.hispeed.ch [213.46.255.2]: 552 5.2.0 rl4b1r00p3kCCMl01l4bgK > automated process detected unsolicited content > > The email is being sent from a UPC connection, via Hostpoint > (mail.hostpoint.ch) to a user @swissonline.ch. > > The user has tried getting an explanation from UPC, but sofar no luck. > > > > > -- > Per Jessen, Zürich (2.8°C) > > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] IPTV channel switch tester
I published a script that was laying around in my private repository for few years already. I think it may be useful for some folks here: https://github.com/ssinyagin/multicast_channel_switch_test -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] VoIP quality monitoring
as a follow-up, here's a video and a podcast for Sevana's product presentation: http://www.voipusersconference.org/2015/vuc567-sevana-evaluating-call-quality/ On Fri, Nov 6, 2015 at 11:44 AM, Stanislav Sinyagin <ssinya...@k-open.com> wrote: > Greetings, > > Here's a short follow-up to yesterday's presentation of Zebbra guys. > > What Markus and Roland have presented, is an approach to monitoring > the quality inside the box (CUCM in their case). But there are > actually ways to monitor the quality outside of the box, and they have > been around for a while. > > For example, I've seen a demonstration of Malden MultiDSLA tool over > 10 years ago. At that time they only had the analog interface that > emulated a handset, and two Malden boxes were sending an audio sample > to each other and assessing the quality of received audio. The tool is > quite expensive though. > > There are currently several commercial solutions for audio quality > analysis: > > POLQA (expensive), recommended by ITU-T: it compares two audio files > and produces the quality assessment score. > > Sevana AQuA (less expensive): it also compares two audio files and > produces several quality metrics. I compared it with PESQ (predecessor > of POLQA), and AQuA works significantly faster. It was very helpful in > detecting lost RTP packets in the tests where I could not place a > packet sniffer wherever I wanted. > > There are also various approaches to passive quality analysis, and > some are documented in ITU-T P.563 and G.107. Sevana is also offering > its PVQA tool that tries to detect packet loss and audio distortions > by analyzing the input audio. > > I could not find any open-source tools which would help in quality > analysis at the audio level. But there's plain old tshark which > produces the loss and jitter statistics for RTP streams, and it's > pretty efficient if you are able to capture the traffic at the > receiving end. Also VoIP monitor provides the ability of G.107 > analysis on captured data packets. > > Here's my detailed article on using Sevana AQuA: > https://txlab.wordpress.com/2015/06/02/quality-assurance-for-voip-calls-2/ > > And here's my demo lab, and you have a possibility to send an audio > recording for Sevana PVQA analysis: > http://voxserv.ch/demolab.html > > cheers, > > -- > Stanislav Sinyagin > Senior Consultant, CCIE #5478 > ssinya...@k-open.com > +41 79 407 0224 > -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] VoIP quality monitoring
Greetings, Here's a short follow-up to yesterday's presentation of Zebbra guys. What Markus and Roland have presented, is an approach to monitoring the quality inside the box (CUCM in their case). But there are actually ways to monitor the quality outside of the box, and they have been around for a while. For example, I've seen a demonstration of Malden MultiDSLA tool over 10 years ago. At that time they only had the analog interface that emulated a handset, and two Malden boxes were sending an audio sample to each other and assessing the quality of received audio. The tool is quite expensive though. There are currently several commercial solutions for audio quality analysis: POLQA (expensive), recommended by ITU-T: it compares two audio files and produces the quality assessment score. Sevana AQuA (less expensive): it also compares two audio files and produces several quality metrics. I compared it with PESQ (predecessor of POLQA), and AQuA works significantly faster. It was very helpful in detecting lost RTP packets in the tests where I could not place a packet sniffer wherever I wanted. There are also various approaches to passive quality analysis, and some are documented in ITU-T P.563 and G.107. Sevana is also offering its PVQA tool that tries to detect packet loss and audio distortions by analyzing the input audio. I could not find any open-source tools which would help in quality analysis at the audio level. But there's plain old tshark which produces the loss and jitter statistics for RTP streams, and it's pretty efficient if you are able to capture the traffic at the receiving end. Also VoIP monitor provides the ability of G.107 analysis on captured data packets. Here's my detailed article on using Sevana AQuA: https://txlab.wordpress.com/2015/06/02/quality-assurance-for-voip-calls-2/ And here's my demo lab, and you have a possibility to send an audio recording for Sevana PVQA analysis: http://voxserv.ch/demolab.html cheers, -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] looking for a sinmple telephony monitoring tool
hi, it's me again :) I started developing such a tool, and the documentation will be added soon: https://github.com/voxserv/rring It uses FreeSWITCH as a SIP endpoint, and sends and receives the calls and allows you to build automated tests that verify that the call is properly established. In addition to that, those audio quality analysis tools that I mentioned today could be used to determine if there actually was an audio stream :-) On Fri, Nov 6, 2015 at 1:07 PM, Amann Hans-Peter <hans-peter.am...@ne.ch> wrote: > Hello, > > We are looking for a tool that permits to check the behavior of a telephony > system at the level of the end user. > > The idea is to launch telephone calls at regular intervals one system, to > pass through the public network and to check on the PABX system under test > (Siemens HiPath 4000 with Trade-Boards) that the voice call arrives > (signaling path) and can be established (voice path). > > Our problem today is that we can check plenty of internal interfaces and > links, but we do not known if all the higher level protocols behave well. > > Thanks for your ideas ! > > Hans-Peter Amann > Etat de Neuchâtel > hans-peter.am...@ne.ch > > > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] IPv6 Business Conference in Zurich, June 18, 2015 - Swinog Member Discount
Because ipv6 is not found anywhere :) On Apr 18, 2015 2:02 PM, Per Jessen per.jes...@enidan.ch wrote: Silvia Hagen wrote: Silvia Hagen Chair Swiss IPv6 Council Hi Silvia, FYI, the website http://www.swissipv6council.ch/ seems to only show a welcome page (from iway). On many other pages I get a 404. For instance http://www.swissipv6council.ch/en/membership/register Gruss Per Jessen -- Per Jessen, Zürich (11.2°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Reliable + Good quality VoIP Provider (US, Switzerland, Korea)
oh, and VoIP over 3G will always suffer in quality, because of significant jitter imposed by 3G transport. On Mon, Jan 26, 2015 at 9:20 AM, Stanislav Sinyagin ssinya...@k-open.com wrote: Nico, you may (and may not) get some improvement in voice quality if you select a network-optimized codec, such as speex, iLBC, SILK, and so on. Most VoIP providers don't offer these codecs, because of their complexity and required CPU power. So, your best choice would be to install one or several VPS'es around the globe, set up some VoIP server software, like FreeSWITCH or Asterisk, and control the full communication between them and your clients. Then these VPS'es would hand over the traffic to some local PSTN providers. So, this needs some engineering, customization, tests = $$$ :) cheers, stan On Sun, Jan 25, 2015 at 4:14 PM, Nico Schottelius nico-swino...@schottelius.org wrote: Good morning Swinog, we are looking for a new VoIP hoster that actually offers decent voice quality, preferable even over hspa(+) based networks, working in the US, Switzerland and South Korea. Working := can receive / make phone calls well enough for daily use (I am aware that VoIP should work everywhere, but in practice the quality either in Switzerland or abroad or both is too poor to talk for long). So far we are using telephoenix.com (reseller of $provider), but have huge problems in terms of voice quality (even via wifi via dsl / cable). I was wondering, if anyone can recommend a provider and also has tested reachability in East Asia and North America? Cheers, Nico -- New PGP key: 659B 0D91 E86E 7E24 FD15 69D0 C729 21A1 293F 2D24 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Suche nach neuem Registrar
I propose adding the following columns: -- Payment periods (for example, 1y, 2y, 5y, 10y) -- Payment methods (need abbreviations for invoice, paypal, credit card, Paynet, LSV) On Fri, Jan 23, 2015 at 4:02 PM, Benoit Panizzon benoit.paniz...@imp.ch wrote: https://docs.google.com/spreadsheets/d/1UWK6ijLCiLXSIuTT4sS_h0zCqPMCjjhry0b yQprysts/edit?usp=sharing Nice! exactly what I had in mind :-) Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G- __ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 PrattelnFax +41 61 826 93 02 Schweiz Web http://www.imp.ch __ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Danke Switch für die Offenlegung des Registrars
for me, the choice is very simple: Metanet.ch is the only one which is listed as Paynet e-bill partner, so it's the only one which will reduce my accounting efforts. Bingo :) 2015-01-13 9:17 GMT+01:00 g...@switch.ch: Hallo Benoit On Mon, 12 Jan 2015 15:52:32 +0100, Benoit Panizzon benoit.paniz...@imp.ch said: Liebe Switch Vielen Dank für das neue Attribut im Whois output: Registrar: das ist schon mal sehr hilfreich. :-) Ich nehme das Lob stellvertretend entgegen :) Was noch immer fehlt, ist eine Vervollständigung der Liste unter: https://www.nic.ch/reg/en/cm/registrar-list mit den Informationen, was welcher Registrar unterstützt. Bei vielen findet man auch nicht auf der Webseite, ob dessen DNS-Server überhaupt via IPv6 erreichbar sind, ob diese IPv6 Glue Records und DNSSEC unterstützen, und ob man die DS Records selber aktualisieren kann oder nur via Kundendienst etc. Wird dies auch noch kommen? Ich persönlich verstehe den Wunsch, aber vermutlich fehlt es an einem Mechanismus, wie diese Informationen gesammelt und aktuell gehalten werden können, abgesehen davon, dass man wohl auf den Goodwill der Registrare angewiesen wäre. Ich leite das aber gerne an die Kollegen weiter. Schöne Grüsse, Alex ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Danke Switch für die Offenlegung des Registrars
Matthias, sorry, you're totally right. MHS is among the e-bill partners. The e-bill partner selection interface in UBS e-banking is totally ridiculous: it's a 16-page flat list of company names, sorted by ASCII code, so mhs goes at the end of the list, while METANET in all caps is easy to spot while browsing through those 16 ridiculous pages :) What I also liked is that Metanet offers immediately 2-, 5-, or 10-year payment terms. On Jan 13, 2015 8:58 PM, Matthias Hertzog m.hert...@mhs.ch wrote: Hi Stanislav Your information is not correct. There are others with e-Rechnung: www.mhs.ch for example. Matthias Peter Preuss peter.pre...@vtx-telecom.ch 13. Januar 2015 17:14 There is such a thing like LSV/DD, pretty handy for domains Cheers pap -Ursprüngliche Nachricht- Von: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch swinog-boun...@lists.swinog.ch] Im Auftrag von Stanislav Sinyagin Gesendet: Dienstag, 13. Januar 2015 16:45 An: swi...@swinog.ch Betreff: Re: [swinog] Danke Switch für die Offenlegung des Registrars for me, the choice is very simple: Metanet.ch is the only one which is listed as Paynet e-bill partner, so it's the only one which will reduce my accounting efforts. Bingo :) -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog Stanislav Sinyagin ssinya...@k-open.com 13. Januar 2015 16:44 for me, the choice is very simple: Metanet.ch is the only one which is listed as Paynet e-bill partner, so it's the only one which will reduce my accounting efforts. Bingo :) ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] .ch registrars : goodbye nic.ch, but where to go then ?
Cool, thanks for the list. Does any of those registrars allow a 5-year payment? Because it's quite annoying to handle those little invoices every year. On Nov 25, 2014 3:11 PM, Olivier Mueller om-lists-swi...@omx.ch wrote: Hello, As you most probably all know, .ch domains which are still registered at nic.ch have to be moved to another registrar by autumn 2016 ( https://www.nic.ch/reg/cm/wcm-page/misc/aufgabentrennung.html). But thanks to some recent marketing campaigns (like Per 31. Dezember 2014 braucht Ihre .ch-Domain ein neues Zuhause!), ads and newspaper articles, some customers are already panicking, so I am also looking for a new home for a few hundreds of self-hosted domains. Requirements: - it should be a registrar only company, if possible (to prevent departure of customers to other hosting companies) - customer billed directly - DNSSEC / IPV6 capable - no aggressive ads on checkout (add antivirus, add top listing, add hosting, etc.) At the moment, my first choice would be gandi.net, even if they are a little bit more expensive than the others and they are also selling some kind of hosting, because it just works, and I like their no bullshit promise :) But maybe there would be a more suitable alternative, so my question to you if you are in a similar situation : which is your new .ch-registrar and why ? Thanks kind regards, Olivier PS: just in case, here is the current list of .ch-Registrars according to the official listing @ Switch, sorted by yearly-cost (no warranty of correctness). 26 companies out of total 70 are not listed (no visible public pricing, reseller-only, etc.) : CHF URL 1 8.90http://www.infomaniak.com/en 2 9.90https://www1.q-x.ch/ 3 9.95http://www.greenmark-it.de/ 4 10.70 https://www.hosttech.ch/ 5 10.75 https://www.metanet.ch/ 6 10.81 http://www.ovh.com/fr/index.xml 7 11.90 http://www.kreativmedia.ch/de/ 8 11.96 http://www.hostway.de/ 9 12.90 http://www.netzone.ch/ 10 12.95 http://www.novatrend.ch/de/ 11 13.50 http://www.1api.net/ 12 13.80 http://www.bar.ch/ 13 13.90 http://www.firestorm.ch/ 14 14.00 https://www.iway.ch/ 15 14.16 http://www.123domain.eu/ 16 14.42 https://www.namebay.com/ 17 14.50 http://www.green.ch/de-ch/home.aspx 18 14.50 http://www.netim.com/domain/ 19 14.90 https://www.amenic.ch/de/ 20 14.90 https://www.cyon.ch/domains/ch-transfer 21 14.90 http://www.easyname.com/en 22 14.90 http://www.webland.ch/ 23 15.00 https://www.hostfactory.ch/ 24 15.00 http://www.hostpoint.ch/ 25 15.00 http://www.vtx.ch/ 26 15.50 http://www.domainpartner.ch/ 27 15.50 http://www.mhs.ch/domains 28 15.50 http://www.switchplus.ch/?lang=de 29 15.90 https://www.hosteurope.ch/ 30 16.12 http://www.gandi.net/ 31 16.71 http://www.inwx.de/ 32 18.03 http://www.1domain.at/ 33 18.36 https://www.101domain.com/ 34 18.41 http://www.marcaria.com/ 35 19.00 https://www.openprovider.co.uk 36 19.71 http://www.domaindiscount24.com/de/ch-domain 37 20.05 https://www.checkdomain.de/ 38 33.66 https://www.eurodns.com/ 39 36.06 http://www.info.at/ 40 58.90 http://www.1und1.de/ 41 59.50 http://www.register.eu/ 42 70.92 http://www.domainname.at/ 43 101.75 http://www.instra.com/ 44 119.00 https://www.united-domains.de/ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
I finally got access to the beta program at Twilio, but they only offer numbers which can receive SMS (079) or voice (landline), but not both at the same time. In other countries, I found such numbers only in UK and US. Nexmo.com offers Swiss numbers with the same limitations, but the SMS-enabled numbers have Sunrise prefixes (076). Probably someone with telephony insight can explain why the virtual Swiss mobile numbers can only receive SMS and not voice? On Tue, Nov 11, 2014 at 4:04 PM, Stanislav Sinyagin ssinya...@k-open.com wrote: hi all, I need to have a Swiss phone number which can receive SMS and voice calls and forward them to my PBX. I know I can build a gateway with a GSM modem, but I'd rather prefer a service from a provider. Up to now I found several service providers like aspsms.com which can only receive SMS on their virtual numbers, but no voice calls. Twilio.com promises such numbers, but Swiss numbers are only available for beta users (waiting for them to enable my beta program access). Any other suggestions? I would also be interested in an Italian number for similar purpose. Italy is not on the list at Twilio yet. cheers, -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
well, last time I tried, it was only possible to send an SMS from a Swisscom mobile to a Swisscom fixline. SIP providers were out of scope, and non-Swisscom GSM providers were too. Probably it's slightly changed, but I don't see any SMS offering from any SIP provider in Switzerland. On Thu, Nov 13, 2014 at 9:58 AM, Per Jessen per.jes...@enidan.ch wrote: Stanislav Sinyagin wrote: Per, I propose that first you actually try it before telling. Hi Stanislav you're right, I haven't tried receiving an SMS with Asterisk yet, but do you see any reason why I shouldn't be able to receive SMS on my fixnet line (when it's been correctly set up in Asterisk) ? For the last 2-3 years, I have been getting the occasional message read out to me by Swisscom. -- Per Jessen, Zürich (9.8°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
On Thu, Nov 13, 2014 at 11:02 AM, Per Jessen per.jes...@enidan.ch wrote: Stanislav Sinyagin wrote: well, last time I tried, it was only possible to send an SMS from a Swisscom mobile to a Swisscom fixline. Have just confirmed that, yes. I tried from two other mobile providers, they didn't work, but with Swisscom it worked. ... which renders the service completely useless :) ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
Per, I propose that first you actually try it before telling. For some mysterious reason, the VoIP providers don't know anything about this :) On Thu, Nov 13, 2014 at 8:00 AM, Per Jessen per.jes...@enidan.ch wrote: Stanislav Sinyagin wrote: hi all, I need to have a Swiss phone number which can receive SMS and voice calls and forward them to my PBX. I know I can build a gateway with a GSM modem, but I'd rather prefer a service from a provider. Any fixnet line with Asterisk on will also do it. -- Per Jessen, Zürich (8.7°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
Jeroen, I strongly disagree. Most SIP providers do not support SMS at all. netvoip.ch does not offer any SMS support. Anveo.com offers SMS support in only a few countries: http://www.anveo.com/mainphonenumbers.asp On Tue, Nov 11, 2014 at 4:30 PM, Jeroen Massar jer...@massar.ch wrote: On 2014-11-11 16:04, Stanislav Sinyagin wrote: hi all, I need to have a Swiss phone number which can receive SMS and voice calls and forward them to my PBX. I know I can build a gateway with a GSM modem, but I'd rather prefer a service from a provider. Up to now I found several service providers like aspsms.com which can only receive SMS on their virtual numbers, but no voice calls. Twilio.com promises such numbers, but Swiss numbers are only available for beta users (waiting for them to enable my beta program access). Any other suggestions? Any standard SIP provider should work, eg my prefered one: netvoip.ch Asterisk details: http://www.anveo.com/faq.asp?code=sip_asterisk_sms Greets, Jeroen -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
as suggested by a colleague, www.nexmo.com looks promising. On Tue, Nov 11, 2014 at 4:04 PM, Stanislav Sinyagin ssinya...@k-open.com wrote: hi all, I need to have a Swiss phone number which can receive SMS and voice calls and forward them to my PBX. I know I can build a gateway with a GSM modem, but I'd rather prefer a service from a provider. Up to now I found several service providers like aspsms.com which can only receive SMS on their virtual numbers, but no voice calls. Twilio.com promises such numbers, but Swiss numbers are only available for beta users (waiting for them to enable my beta program access). Any other suggestions? I would also be interested in an Italian number for similar purpose. Italy is not on the list at Twilio yet. cheers, -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Virtual numbers for receiving SMS and voice?
but... nexmo offers numbers which can either receive only SMS or only voice, but not both at the same number: https://help.nexmo.com/hc/en-us/articles/204015043-Inbound-Reach-List-Who-can-send-SMS-to-my-Inbound-Nexmo-Number- On Tue, Nov 11, 2014 at 8:07 PM, Stanislav Sinyagin ssinya...@k-open.com wrote: as suggested by a colleague, www.nexmo.com looks promising. On Tue, Nov 11, 2014 at 4:04 PM, Stanislav Sinyagin ssinya...@k-open.com wrote: hi all, I need to have a Swiss phone number which can receive SMS and voice calls and forward them to my PBX. I know I can build a gateway with a GSM modem, but I'd rather prefer a service from a provider. Up to now I found several service providers like aspsms.com which can only receive SMS on their virtual numbers, but no voice calls. Twilio.com promises such numbers, but Swiss numbers are only available for beta users (waiting for them to enable my beta program access). Any other suggestions? I would also be interested in an Italian number for similar purpose. Italy is not on the list at Twilio yet. cheers, -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinya...@k-open.com +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Cablecom not accepted as connectivity provider for Swiss Government
correct link: http://www.tagesanzeiger.ch/schweiz/standard/Bund-traut-der-Cablecom-nach-NSAAffaere-nicht-mehr/story/30526870 On Fri, Oct 17, 2014 at 4:27 PM, Jeroen Massar jer...@massar.ch wrote: http://www.tagesanzeiger.ch/schweiz/standard/Bund-traut-der-Cablecom-nach-NSAAffaere-nicht-mehr Time for some companies to show to the Swiss government that they are Swiss owned and have their own Swiss-wide networks ;) ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Swiss VoIP providers
Jeroen, once we started talking about FreeSWITCH, here's my minimalist configuration, quite handy to start a new installation: https://github.com/xlab1/freeswitch_conf_minimal From: Jeroen Massar jer...@massar.ch To: Michael Horn nibb...@nibbler.de; swinog@lists.swinog.ch Sent: Friday, August 29, 2014 8:45 AM Subject: Re: [swinog] Swiss VoIP providers On 2014-08-29 03:23, Michael Horn wrote: On Thu, 28 Aug 2014 19:45:43 +0200 (CEST) Ralph Krämer ralph.krae...@vable.ch wrote: I suggest to run your own Asterisk (or Callmanager) ...or freeswitch, if you like reliability and predictable behaviour. I've managed quite a few freeswitch deployments until now and did some migrations from Asterisk to freeswitch due to issues with reliability or flexibility. As an office/corporate pbx I'd select freeswitch over asterisk any time. If something more specialized is needed, yate is worth a try. +1 on FreeSWITCH, have been using that for years; and as they finally have debian packages that work in their own apt-repo, makes installing much easier too. One thing to note though is that one does not have to keep their configfile layout, one can bend it anyway one likes. through a redundant SIP-Trunk to an VoIP Provider. Curious however about recommendations for VoIP providers in .ch there aren't that many around unfortunately. would love to hear some suggestions (backed by experiece). I have good experience with netvoip.ch; though it really depends on why/how one uses it (in my case inbound only mostly and not for large volumes). Note also, that if one has a hardline and a Fritz!Box, one can use the latters internal SIP server to make that hardline available from anything you can connect to it. (SIPclients - FS - F!B in my case). Greets, Jeroen ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Swiss VoIP providers
also probably this link is worth sharing :-) https://github.com/xlab1/voip_qos_probe From: Michael Horn nibb...@nibbler.de To: Stanislav Sinyagin ssinya...@yahoo.com Cc: Jeroen Massar jer...@massar.ch; swinog@lists.swinog.ch swinog@lists.swinog.ch Sent: Saturday, August 30, 2014 12:42 AM Subject: Re: [swinog] Swiss VoIP providers On Fri, 29 Aug 2014 15:34:49 -0700 Stanislav Sinyagin ssinya...@yahoo.com wrote: Jeroen, once we started talking about FreeSWITCH, here's my minimalist configuration, quite handy to start a new installation: https://github.com/xlab1/freeswitch_conf_minimal Thanks a lot! I was keeping something like that in my private drawer for quite some time as the default-configuration fs comes with is a verbose example but by no means adequate or reasonable for generic deployments. I'd even move the definitions for sip-profile parameters from vars to the relevant profiles because fs-newbies are often confused by this separation and indirection which might lead to insecure setups. Anyway... your configuration seems a much easier starting point for most users. Will keep the URL to the repo in my bookmarks for sure :-) -mh ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Swiss VoIP providers
there's a number of providers who offer a standard set of features on their hosted PBX solutions. But if you want something special, you would have to build or buy a specialized solution. For example, I built recently a PBX with call routing based on Google Calendar and Google Contacts :) Probably this should give you a good start: https://www.google.ch/search?q=site%3Ach+hosted+pbx From: Antoine Benkemoun-André anto...@benkemoun.fr To: swi...@swinog.ch swi...@swinog.ch Sent: Thursday, August 28, 2014 6:00 PM Subject: [swinog] Swiss VoIP providers Dear colleagues, I have come to ask for your help regarding VoIP providers based in Switzerland. Our telephony is currently managed by our landlord (EPFL) but we are moving offices very soon and will need to switch to a VoIP option. We initiated a few contacts but are not very impressed with what we have been seeing so far… We are just looking for a hosted VoIP infrastructure provider able to cater to small companies in an efficient way. It needs to be configurable by us as much as possible. We also need to be able to obtain a contractual SLA for management reasons as you can expect. Ideally, we would like to have a demo account set up by next week because I'm off on holiday after that and I would like to concerned parties to be testing it during that time. I guess this should not be an issue for an efficient provider ;-) So, do you have any feedback regarding such offers ? Thank you in advance for your help, Antoine ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Lösung für eine SMS-Notfallalarmierung und Statuswebseite
I'm a happy user of http://www.inetworx.ch/ Their HTTP API is simple and a single-line curl request can be easily made from a shell script. Also recently I built a 3G-enabled Linux box with PCengines APU, and it can also be used for sending SMS: http://txlab.wordpress.com/2014/06/20/3g-connectivity-for-pc-engines-apu/ From: Onlime Webhosting philip.ie...@onlime.ch To: Philip Iezzi philip.ie...@onlime.ch Cc: swinog@lists.swinog.ch; Andy Christen andreas.chris...@ergon.ch Sent: Thursday, July 31, 2014 3:42 PM Subject: Re: [swinog] Lösung für eine SMS-Notfallalarmierung und Statuswebseite Hi all Ich würde dieses Thema gerne nochmals aufgreifen. Wir überlegen uns, in Zukunft doch einen SMS-Gateway-Anbieter via API zu verwenden (allenfalls in Kombination mit Pushover, https://pushover.net/). Hat jemand von euch Erfahrung mit einem der folgenden Anbietern gemacht?: ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] remote management box with 3G and WiFi connectivity
hi all, just in case, might be interesting to some of you -- here I described a process of building a Linux box with 3G connectivity for remote management, network tests, VPN fallback, and so on. The box has also the possibility to add a WiFi adapter with an antenna: http://txlab.wordpress.com/2014/06/20/3g-connectivity-for-pc-engines-apu/ cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Swinog BE132 ZRH
[yahoo mail composer sucks] Debian Treff: I thought you just put the image onto a flash and boot from it, what else is there to discuss? - Original Message - From: Martin Ebnoether ventila...@semmel.ch To: Peter Keel seeg...@discordia.ch Cc: swi...@swinog.ch swi...@swinog.ch Sent: Tuesday, May 6, 2014 10:10 AM Subject: Re: [swinog] Swinog BE132 ZRH On the Tue, May 06, 2014 at 09:40:07AM +0200, Peter Keel blubbered: Since nobody will come to the Swinog BE, I will cancel the event. :( Usually, I would have come, but I was rather tired from the week-end ;) This usually clashes with the LUGS Winterthur meeting, plus there is the Debian Treff right the next day. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Project of cooperation between Swiss ISPs
I would advise to choose a better (more distinctive) name for the forum website. also such a joint venture will be quite difficult to manage, and decision-making process will be quite challenging. From: Gregory Agerba gregory.age...@gmail.com To: swinog swinog@lists.swinog.ch Sent: Tuesday, October 22, 2013 2:40 PM Subject: [swinog] Project of cooperation between Swiss ISPs Dear SwiNOGers, This is a short message targeting small and medium Swiss-based Internet Service Providers. A few days ago I started reaching out a few ISPs, mostly in the region of Zurich/Zug/Bern/Basel, to discuss the possibility of a smart collaboration in a “cooperative” and “constructive” way. I actually wanted to check out if there was any enthusiasm on the idea of building together a network to reach major European Internet Exchange, buy Transit in bulk, peer with larger networks and setup a larger DDoS mitigation service. The idea came when I saw that many smaller ISPs deploy the same type of network, seeking the same advantages and struggle to deploy a wider reach outside Switzerland due mostly to a lack of available manpower or financial backing. Amongst a more human collaboration between tenants, various cross-business opportunities, the idea is to collaborate on: * Establishing a privileged network of trusted companies and people * Enhancing IP Transit Connectivity quality and costs by playing on larger value scales * Enhancing IP Peering Connectivity by reaching various European IXs over the same infrastructure * Enhancing campus-interconnection in Zurich by lowering costs for inter-DC connectivity in Zurich (DWDM/DF) by sharing the same infrastructure * Build and share a larger DDoS mitigation platform These challenges are part of day-to-day hassles that every ISPs companies have to deal. Scepticism of a working business-model has been highlighted by various interested parties. Other topics such as IP Transit rates erosion costs vs. high transport costs and port-fees have been thoroughly considered too. Therefore, for Swiss ISPs who are interested and willing to take a look, we’d like to invite you to join our discussion board – www.swissnog.ch – please keep in mind that this is in no means a board affiliated with SwiNOG and that if you want to debate about it you are most welcome to join rather than reply here. We look forward to seeing you there! -- Gregory ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Small VoIP PBX recommendations
if you ask here: https://plus.google.com/communities/114149566116254233716 you will most probably get a quality answer. From: Andre Oppermann opperm...@networx.ch To: swi...@swinog.ch Sent: Thursday, August 22, 2013 6:56 PM Subject: [swinog] Small VoIP PBX recommendations I'm looking for recommendations on small VoIP PBX systems with these properties: - works well with Snom, Aastra, and Soft-phones - 10-15 phones - basic admin (web gui) to configure accounts and assign numbers (DDI) - reliable and secure operation - support for uplink SIP trunking (no BRI ports) - log for CDRs to see who cost how much An opensource solution running on Linux/FreeBSD would be preferred, a small and good complete hardware solution for a couple of hundred bucks would acceptable as well. In either case it should be relatively straight forward and low hassle installation and operation. What would you recommend? Which packages would you rather avoid? ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Small VoIP PBX recommendations
http://cudatel.com/ is offering a PBX appliance. They are also the main sponsor of FreeSWITCH, which is also quite easy to set up and maintain without any GUI. I operate two FreeSWITCH VPS'es, and it feels great :) From: Andre Oppermann opperm...@networx.ch To: swi...@swinog.ch Sent: Thursday, August 22, 2013 6:56 PM Subject: [swinog] Small VoIP PBX recommendations I'm looking for recommendations on small VoIP PBX systems with these properties: - works well with Snom, Aastra, and Soft-phones - 10-15 phones - basic admin (web gui) to configure accounts and assign numbers (DDI) - reliable and secure operation - support for uplink SIP trunking (no BRI ports) - log for CDRs to see who cost how much An opensource solution running on Linux/FreeBSD would be preferred, a small and good complete hardware solution for a couple of hundred bucks would acceptable as well. In either case it should be relatively straight forward and low hassle installation and operation. What would you recommend? Which packages would you rather avoid? Thanks -- Andre ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Asterisk expert needed
I'm looking for an engineer with deep low-level knowledge of Asterisk internals and experience with Sangoma cards, to assist me in troubleshooting at the customer site. Preferably a German speaker, and physically available near Zürich. This is a one-time assignment, but may lead to some additional work in the future. Please contact me at ssinya...@k-open.com cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Asterisk expert needed
thanks everyone, now I've got enough experts for my entire life :) From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Sent: Wednesday, July 10, 2013 7:58 AM Subject: [swinog] Asterisk expert needed I'm looking for an engineer with deep low-level knowledge of Asterisk internals and experience with Sangoma cards, to assist me in troubleshooting at the customer site. Preferably a German speaker, and physically available near Zürich. This is a one-time assignment, but may lead to some additional work in the future. Please contact me at ssinya...@k-open.com cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] sflow proxy/multiplexer
should be quite easy to solve with a small C program which reads UDP packets from a socket and replicates them to some other destinations. Easy-peasy :) From: Julian Rutz m...@jurutz.com To: swi...@swinog.ch Sent: Monday, June 17, 2013 8:46 PM Subject: [swinog] sflow proxy/multiplexer Hi there, Maybe some of you folks can give me a hint on this... I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a decent sflow proxy/multiplexer. Any suggestions are welcome - preferably opensource :) Thanks in advance. Cheers, Julian ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] need SNMP devices for Torrus demo
greetings, Some devices that we used at the Torrus+Extopus demo are no longer available: http://demo.oetiker.torrus.net/ so, I'm looking for more devices, preferably with some real and active traffic, so that the graphs don't look boring. The interface descriptions and SNMP location and contact will be screened, and your company will be listed in the Acknowledgments section. We can poll via IPv4 or IPv6, using SNMP versions 1, 2c, and 3. Please contact me at ssinya...@k-open.com thanks ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Looking for a new mailsystem
I know some of them from some non-ISP projects, and I can recommend them as well. From: Robert Meyer r.me...@net-wizard.org To: Michael Richter mrich...@sasag.ch Cc: swinog@lists.swinog.ch swinog@lists.swinog.ch Sent: Monday, December 17, 2012 5:36 PM Subject: Re: [swinog] Looking for a new mailsystem Hi, I have made good experiences with FurureLab as a solution provider for Internet Service Platforms (http://www.futurelab.ch/de). regards Robert On Mon, Dec 17, 2012 at 04:03:34PM +, Michael Richter wrote: Hi there We are looking for a new mailsystem can anyone recommend a swiss company who can deliver us an open source mail system also with support? It should be open source based. We have over 13'000 mailboxes, for me these are a lot, for others it's tiny :-) We aren't having enough men-power to build such a system ourself. I'm glad for every response thanks michael Freundliche Grüsse sasag Kabelkommunikation AG Michael Richter dipl. Techniker HF Mühlenstrasse 21 8201 Schaffhausen mrich...@sasag.ch 052 633 01 71 www.sasag.ch ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Robert Meyer r.me...@net-wizard.org ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] routing protocols between isp and customer?
hi Roman, I would propose BGP on CE-PE link, with some BGP community policy. Then the customer would send you community strings which govern local preference and announcements of those prefixes. I made several such policy implementations based on Easynet BGP policy: http://lg.easynet.net/bgppolicy.php This is a very detailed document, and it covers all possible needs for an SP. Typically you only need to implement a part of it. cheers, stan - Original Message - From: Roman Hochuli roman.hoch...@nexellent.ch To: swi...@swinog.ch swi...@swinog.ch Cc: Sent: Friday, November 2, 2012 9:56 AM Subject: [swinog] routing protocols between isp and customer? Hey All Quick question: do you allow/run routing protocols between your (isp-) network and your customer? If so: which protocols? If not: what reasons do you tell the customer? In particular I am interested to know about setups when they want to announce the prefix/subnet you assigned them from your PA-space back to you because they want to run redundant routers. The setup would probably look like this: Customer Subnet 10.0.0.0/27 / \ | | [customer router a] - routing protocol x - [customer router b] | | routing protocol y routing protocol y | | [isp router a] - routing protocol z - [isp router b] | | \ / ISP Network 10.0.0.0/8 -- Best regards, Roman Hochuli Operations Manager nexellent ag Saegereistrasse 33 CH-8152 Glattbrugg Phone: +41 44 872 20 00 Fax: +41 44 872 20 01 URL: www.nexellent.ch X-NCC-RegID: ch.nexellent Imagination is the one weapon in the war against reality. -- Jules de Gaultier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] routing protocols between isp and customer?
sure, they announce a part of your PA superblock, and you route it in internal BGP, and just make sure you don't announce longer prefixes to the outside world. And this community concept is actually helping to do this in an efficient manner. Pretty much everyone is doing that. - Original Message - From: Roman Hochuli roman.hoch...@nexellent.ch To: swinog@lists.swinog.ch Cc: Sent: Friday, November 2, 2012 11:41 AM Subject: Re: [swinog] routing protocols between isp and customer? Hello Stan I would propose BGP on CE-PE link, with some BGP community policy. As far as I understand this document is talking about bgp-setups as a whole. I would be more interested to hear if they would break out a subnet out of their PA-allocation and accept that back over insert routing protocol of choice here from their customer. -- Best regards, Roman Hochuli Operations Manager nexellent ag Saegereistrasse 33 CH-8152 Glattbrugg Phone: +41 44 872 20 00 Fax: +41 44 872 20 01 URL: www.nexellent.ch X-NCC-RegID: ch.nexellent Imagination is the one weapon in the war against reality. -- Jules de Gaultier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] ISP service management tool
hi all, I'm looking for an open-source tool for ISP service management. It should allow documenting of all the physical network (ideally, also the datacenter environment), and associate physical and logical network instances with customer services and their contracts. I looked at several tools, but they all are designed for Enterprise IT tasks, and none of them deals with subscribers and contracts: http://www.opendcim.org/ http://www.i-doit.org/ The NOC project seems to be promising, I should probably invest more time in learning it: http://kb.nocproject.org/display/SITE/NOC Your feedback will be appreciated. Commercial systems would also be OK, as long as they fit the requirements and have open API. thanks, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Using Gerty for Cisco config automation
hi all, I’m developing the Gerty software since about two years already, and it needs a bit of an effort to publish the final release. Anyway, it’s completely usable and production ready. https://github.com/ssinyagin/gerty Here I placed a new example based on a real-life use case: a few hundred Cisco routers need a context-dependent configuration update. https://github.com/ssinyagin/gerty/blob/master/doc/cisco_config_manipulation_example.markdown enjoy. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Calling all stations - Followup
From: chris burri chris.bu...@bitlink.ch To: swi...@swinog.ch Sent: Friday, August 3, 2012 2:19 AM Subject: [swinog] Calling all stations - Followup The customers I have are getting prepaid internet access. More info about that can be found on the bitlink.ch website. the bitlink.ch link goes to genotec, a hosting provider. http://www.bitlink.ch/ finally lands on something relevant. So much for the techieness :) so, you sell 4Mbps wireless internet for prepaid CHF50/month, and you want more customers? I'd say, no way I would trust my money in such a business. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Gerty vs. Rancid
here's the Gerty author :) it was initially intended to replace RANCID, but it appears that all my production installations use Gerty for something different :) But config backup has been tested, and as far as I know there are no complaints. Keep in mind also the plugins here: https://github.com/ssinyagin/gerty-plugins cheers, stan From: Tobias Brunner tobias.brun...@nine.ch To: swinog@lists.swinog.ch Sent: Monday, June 11, 2012 11:01 AM Subject: [swinog] Gerty vs. Rancid Hi list Is anyone of you using Gerty (https://github.com/ssinyagin/gerty) instead of Rancid for doing network gear config backup? If yes, is it worth a try? And for doing mass-config-updates on many switches, is it also usable? Thanks for every input =) Cheers, Tobias -- Nine Internet Solutions AG, Albisriederstr. 243a, CH-8047 Zuerich Support +41 44 637 40 40 | Tel +41 44 637 40 00 | Direct +41 44 637 40 13 Skype nine.ch_support ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] hosting for 1 powersupply with lan port
another way to avoid the ssh agent intrusion is to use TCP tunneling through SSH. Then the intermediate host is only used for TCP connection bridging, but all the authentication is happening outside of your jumphost. - Original Message - From: Stanislav Sinyagin ssinya...@yahoo.com From: Jeroen Massar jer...@unfix.org On 2 Jun 2012, at 05:49, Stanislav Sinyagin ssinya...@yahoo.com wrote: When I'm logged in to the VPS, I can do ssh -A ssinyagin@1.2.3.4 with this command, the server 1.2.3.4 authenticates me through my public key, and the VPS acts as the SSH agent proxy. So, if that server has my public key in .ssh/authorized_keys, I'm easily in, and no security breach on the VPS would affect my security. Unless the attacker is on the jumpbox as root as then they can also forward in the same way, but this should not happen ofcourse ;) yes, in theory if the attacker is logged in as root, then during my SSH session they may make an SSH connection using my credentials. But it would be difficult to stay unnoticed, and it's only possible while I'm logged in. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] hosting for 1 powersupply with lan port
ok, more to the details. I. SSH auth. forwarding = on my PC, I have my private SSH key, encrypted with a good password. As I control this environment, I make sure this is the only copy of my private key, and all backup copies are encrypted with other passwords. On my VPS that I use as a jumphost, I have my public key in .ssh/authorized_keys. So my login does not even have a password on that server. When I'm logged in to the VPS, I can do ssh -A ssinyagin@1.2.3.4 with this command, the server 1.2.3.4 authenticates me through my public key, and the VPS acts as the SSH agent proxy. So, if that server has my public key in .ssh/authorized_keys, I'm easily in, and no security breach on the VPS would affect my security. II. Secure data on a foreign machine == so, your VPS is in an untrusted environment, and you need to store sensitive data on it (e.g. VPN configuration and keys). You create a cryptfs folder, mount it with a manually entered password, and store your sensitive data on it. As long as the server is running, your processes can access the data. If the server reboots, it needs to notify the operator via email or SMS, and the operator logs in and mounts the cryptfs again. Of course depending on the virtualization technology, your provider may log in from the VM console and see your data. So, you either trust your provider, or use a physical machine like pcengines. On the latest DENOG meeting, there was an interesting report that offline RAM chips still hold traces of your data for few hours, so be careful with that too :) As an alternative to cryptfs, you can mount a RAM disk and initialize its content from your home location via an SSH tunnel. If you use Git, you can also do incremental updates to the running system. III. Off-site backups == what I do is let my home NAS pack the data directory, encrypt it with AES256, and push towards the VPS server. So, nightly I transfer a few hundred megabytes. It works fine as long as I keep the footprint within reasonable limits. As an alternative, there was somewhere a project that modifies rsync in a way that it can work with encrypted data on the remote site. did I miss something? From: Silvan Gebhardt gebha...@openfactory.ch To: swinog@lists.swinog.ch Sent: Saturday, June 2, 2012 11:50 AM Subject: Re: [swinog] hosting for 1 powersupply with lan port Good Morning! The cloud is completely anonymous, that makes the feeling to do something (as a provider) much lower in my opinion. Knowing someone, even the face, is much better. Since I know this point I did not call it physical security but security through obscurity on purpose. Since such a plug PC makes extraction of data a bit more complex - possible always - I gain time. Time when the box is offline to revoke my keys ;) I do have to trust the people I will be hosting it with, there is a reason I do it in switzerland. (Yes, I belive after beeing the nation of money we will be the *data bankers* soon) @Stanislav: Interesting flag with SSH -A - I will have to read there futher, is this something like PFS with IPSEC? never heard about that flag. I think we are creating a topic for next swinog here. Networking for Mobile workers (Mosh) with paranoia Am 02.06.2012 08:57, schrieb Viktor Steinmann: Interesting topic, especially looking at the current cloud trends. We've been discussing this internally and came to the conclusion, that as long as someone has physical access to a server, he will always be capable of reading the data on that server with more or less effort. Even using a high level of physical security to ensure, nobody has physical access to the box can be broken with enough time and effort, especially from the people housing the box. In the end, all you need is trust. If you trust the people housing your box and if you trust their ability to keep the bad guys physically away, everything is fine. If you can't trust them you are lost in any case. Kind regards, Viktor Am 02.06.2012 01:05, schrieb Stanislav Sinyagin: security by obscurity? you know, with a JTAG adapter and a bit of knowledge, one can read the onboard flash from those plugs too. so, probably a better approach is to have a system which doesn't expose your data when the disk is compromised. The simplest example is SSH with public key authentication and authentication forwarding (-A flag). ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi
Re: [swinog] hosting for 1 powersupply with lan port
From: Jeroen Massar jer...@unfix.org To: Stanislav Sinyagin ssinya...@yahoo.com Cc: Silvan Gebhardt gebha...@openfactory.ch; swinog@lists.swinog.ch swinog@lists.swinog.ch Sent: Saturday, June 2, 2012 4:05 PM Subject: Re: [swinog] hosting for 1 powersupply with lan port On 2 Jun 2012, at 05:49, Stanislav Sinyagin ssinya...@yahoo.com wrote: When I'm logged in to the VPS, I can do ssh -A ssinyagin@1.2.3.4 with this command, the server 1.2.3.4 authenticates me through my public key, and the VPS acts as the SSH agent proxy. So, if that server has my public key in .ssh/authorized_keys, I'm easily in, and no security breach on the VPS would affect my security. Unless the attacker is on the jumpbox as root as then they can also forward in the same way, but this should not happen ofcourse ;) yes ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] hosting for 1 powersupply with lan port
From: Jeroen Massar jer...@unfix.org On 2 Jun 2012, at 05:49, Stanislav Sinyagin ssinya...@yahoo.com wrote: When I'm logged in to the VPS, I can do ssh -A ssinyagin@1.2.3.4 with this command, the server 1.2.3.4 authenticates me through my public key, and the VPS acts as the SSH agent proxy. So, if that server has my public key in .ssh/authorized_keys, I'm easily in, and no security breach on the VPS would affect my security. Unless the attacker is on the jumpbox as root as then they can also forward in the same way, but this should not happen ofcourse ;) yes, in theory if the attacker is logged in as root, then during my SSH session they may make an SSH connection using my credentials. But it would be difficult to stay unnoticed, and it's only possible while I'm logged in. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] hosting for 1 powersupply with lan port
Silvan, I would highly recommend pcengines.ch instead. They are quickly available (usually shipped the next day after ordering) from a Swiss store, and so far they are the cheapest linux boxes that I could find. I'm using them exactly for the same purpose - as ssh jumphosts :) http://linux.voyage.hk/ is a flavor of Debian specifically tailored for these boxes. It mounts the root in read-only mode by default, so your CF storage is written only when needed. here I put a few related notes in my blog: http://txlab.wordpress.com/tag/voyage-linux/ From: Silvan M. Gebhardt gebha...@openfactory.ch To: swi...@swinog.ch Sent: Thursday, May 31, 2012 11:10 PM Subject: [swinog] hosting for 1 powersupply with lan port Hi Swinogers, I'm currently thinking about deploying a Sheevaplug or similar with mosh (http://mosh.mit.edu) as a login jumphost since I am several hours in mobile mode every day and I need a space outside of my network to host a *jump host* please contact me offlist and offer me housing for something like that: http://www.plugcomputer.eu/ All I am taking up is some bandwith (expected bandwith in average probably 1mbit max, half of it for keepalives for outbound vpn tunnels, Power consumption apparently less than 10watts. Need v6 and v4 connection, 1 IP each, public, not firewalled, 1 Plug in the power strip Since this is a rather non-standard thing I'm looking for, but I need it in a datacenter outside my infrastructure, I thought it's best to ask here. Btw, for anyone experienced already or looking into mosh, looking forward for exchange here Good Evening! Silvan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] hosting for 1 powersupply with lan port
but actually for your purpose, I would just buy the cheapest VPS at http://www.buildyourvps.com/ I've got one for about $35 a year. The machine (or probably the network) is heavily oversubscribed, but you get a virtual machine on a dedicated IP address. From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Sent: Friday, June 1, 2012 10:24 AM Subject: Re: [swinog] hosting for 1 powersupply with lan port Silvan, I would highly recommend pcengines.ch instead. They are quickly available (usually shipped the next day after ordering) from a Swiss store, and so far they are the cheapest linux boxes that I could find. I'm using them exactly for the same purpose - as ssh jumphosts :) http://linux.voyage.hk/ is a flavor of Debian specifically tailored for these boxes. It mounts the root in read-only mode by default, so your CF storage is written only when needed. here I put a few related notes in my blog: http://txlab.wordpress.com/tag/voyage-linux/ From: Silvan M. Gebhardt gebha...@openfactory.ch To: swi...@swinog.ch Sent: Thursday, May 31, 2012 11:10 PM Subject: [swinog] hosting for 1 powersupply with lan port Hi Swinogers, I'm currently thinking about deploying a Sheevaplug or similar with mosh (http://mosh.mit.edu) as a login jumphost since I am several hours in mobile mode every day and I need a space outside of my network to host a *jump host* please contact me offlist and offer me housing for something like that: http://www.plugcomputer.eu/ All I am taking up is some bandwith (expected bandwith in average probably 1mbit max, half of it for keepalives for outbound vpn tunnels, Power consumption apparently less than 10watts. Need v6 and v4 connection, 1 IP each, public, not firewalled, 1 Plug in the power strip Since this is a rather non-standard thing I'm looking for, but I need it in a datacenter outside my infrastructure, I thought it's best to ask here. Btw, for anyone experienced already or looking into mosh, looking forward for exchange here Good Evening! Silvan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] hosting for 1 powersupply with lan port
security by obscurity? you know, with a JTAG adapter and a bit of knowledge, one can read the onboard flash from those plugs too. so, probably a better approach is to have a system which doesn't expose your data when the disk is compromised. The simplest example is SSH with public key authentication and authentication forwarding (-A flag). From: Silvan Gebhardt gebha...@openfactory.ch To: swinog@lists.swinog.ch Sent: Friday, June 1, 2012 10:28 PM Subject: Re: [swinog] hosting for 1 powersupply with lan port Hello Stanislav and List There are two reasons why I want this plug PC: 1) security through obscurity. if someone by whatever means take this thing apart - an alix is very easy to dump the content off it. a VPS is even worse. 2) such a Plug PC has at least double the ram an alix has, the moment you want to also run mutt on it it starts to become a bit relevant, with a few dozend openvpn client connections as well I do run a lot of Alixes globally already, I do know the whole box quite good. I'd love to keep this box in switzerland as well ;) Thanks for the input, mosh will be a topic I will update the ML if the interest is there - I'm looking forward to see how it behaves on sat connections etc. Silvan Am 01.06.2012 10:36, schrieb Stanislav Sinyagin: but actually for your purpose, I would just buy the cheapest VPS at http://www.buildyourvps.com/ I've got one for about $35 a year. The machine (or probably the network) is heavily oversubscribed, but you get a virtual machine on a dedicated IP address. From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Sent: Friday, June 1, 2012 10:24 AM Subject: Re: [swinog] hosting for 1 powersupply with lan port Silvan, I would highly recommend pcengines.ch instead. They are quickly available (usually shipped the next day after ordering) from a Swiss store, and so far they are the cheapest linux boxes that I could find. I'm using them exactly for the same purpose - as ssh jumphosts :) http://linux.voyage.hk/ is a flavor of Debian specifically tailored for these boxes. It mounts the root in read-only mode by default, so your CF storage is written only when needed. here I put a few related notes in my blog: http://txlab.wordpress.com/tag/voyage-linux/ From: Silvan M. Gebhardt gebha...@openfactory.ch To: swi...@swinog.ch Sent: Thursday, May 31, 2012 11:10 PM Subject: [swinog] hosting for 1 powersupply with lan port Hi Swinogers, I'm currently thinking about deploying a Sheevaplug or similar with mosh (http://mosh.mit.edu) as a login jumphost since I am several hours in mobile mode every day and I need a space outside of my network to host a *jump host* please contact me offlist and offer me housing for something like that: http://www.plugcomputer.eu/ All I am taking up is some bandwith (expected bandwith in average probably 1mbit max, half of it for keepalives for outbound vpn tunnels, Power consumption apparently less than 10watts. Need v6 and v4 connection, 1 IP each, public, not firewalled, 1 Plug in the power strip Since this is a rather non-standard thing I'm looking for, but I need it in a datacenter outside my infrastructure, I thought it's best to ask here. Btw, for anyone experienced already or looking into mosh, looking forward for exchange here Good Evening! Silvan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Platform for open audio workshops
while we're on the get-together topic :) I've built a small platform for audio seminars and workshops: http://trrtrr.net The primary goal was to set up discussions on IP telephony technologies (hence the name), but I'm completely open and if someone has a good topic for discussion, I'll gladly pass the moderator credentials. The conferences are automatically recorded, and then can be easily published somewhere like SoundCloud. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] VoIP slideshow from last meeting
hi some people asked a copy of my slideshow, but it's not yet available on swinog.ch site. Here you can download one if needed. http://wp.me/pnknY-7i cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] while Tobi speaks...
here's a complimetnary slideshow to what Tobi is presenting now: http://www.denog.de/meetings/denog3/pdf/09-Sinyagin-Torrus_Gerty_Mooxu.pdf ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] FW: IPv6 de-aggregation
as far as I understand, renumbering is currently the common strategy for PA blocks. here you may find some highlights: http://yorickdowne.wordpress.com/2010/01/15/ipv6-addressing-renumbering/ The general idea is to design the enterprise network in such a way that renumbering is easy and low-cost. I guess for companies which demand a few dozens of routed LAN's (due to geography or security requirements), it's worth trying to become LIR by themselves. - Original Message - From: john.coll...@bit.admin.ch john.coll...@bit.admin.ch To: swinog@lists.swinog.ch Cc: Sent: Friday, April 27, 2012 12:01 PM Subject: [swinog] FW: IPv6 de-aggregation Hi again Swinog members, Many thanks for the many informative replies. Some or maybe most (random sample) of the /48s in the routing table are not PIs - needs further analysis. Regarding the PI suggestion, what do we do with customers who will never have an own AS and will never be dual homed? Do they have to resign to using Provider space - with renumbering when they change Provider. Or is there another way? I know of this document which seems to tolerate /48 prefix propagation (even if the case described is not exactly our case) http://www.ripe.net/ripe/docs/ripe-532. Does this document mean anything to SPs out there? Thanks again John -Original Message- From: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of Bernhard Schmidt Sent: Freitag, 27. April 2012 10:39 To: swinog@lists.swinog.ch Subject: Re: [swinog] IPv6 de-aggregation On 27.04.2012 10:09, john.coll...@bit.admin.ch wrote: Hello, we're a LIR, we got a /32 from RIPE and we want to allocate /40s and /48s to customers. Only snag is that the customers will not have their Internet feed from us but from any Service Provider of their choice. The customers will have to convince their SPs (X, Y, Z) to route these non X,Y,Z or foreign prefixes. We're getting a lot of raised eyebrows about this. What's this about prefixes longer that /32 not being propagated? When I look at the IPv6 table I see: IPv6 Routing Table Summary - 8625 entries 5 local, 2 connected, 3 static, 0 RIP, 8615 BGP 0 IS-IS, 0 OSPF Number of prefixes: /0: 1, /8: 1, /10: 1, /12: 1, /16: 1, /19: 2, /20: 5, /21: 3 /22: 5, /23: 5, /24: 7, /25: 4, /26: 9, /27: 10, /28: 31, /29: 19 /30: 15, /31: 13, /32: 4049, /33: 97, /34: 87, /35: 93, /36: 242, /37: 7 /38: 50, /39: 22, /40: 385, /41: 12, /42: 18, /43: 34, /44: 151, /45: 15 /46: 75, /47: 45, /48: 3006, /49: 3, /50: 1, /52: 5, /56: 9, /64: 40 /126: 1, /128: 45 So where did all the /48s come from ... also one or two /40s... ?? Deaggregation and PIv6 prefixes (which are /48s usually). What do you think about this? If you're a SP would you route the /48s or /40s from the customers? What about your upstream peers? If you were my paying customer insisting on getting a /40 or /48 from your PA space announced I would of course do so. But that's only half of the story, because others have to accept that. And there will be networks that don't. There is no real consensus on if and how much deaggregation from PA space should be allowed. As long as that is not there, we are filtering /36 from PA space. And I know others do, too. If you absolutely need to do this, make sure you announce the covering /32 somewhere. And make sure you do everything possible to prove the validity of those routes (proper route6-objects, maybe RPKI ROA, ...) Bernhard ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Ideal fanless box for a small IP-PBX @ricardo
might be useful for someone: ricardo.ch - article no. 672073182 Here I made voice tests with a similar CPU: http://txlab.wordpress.com/2012/03/12/freeswitch-performance-test-on-amd-geode-lx800/ The item at Ricardo has a built-in hard drive, which is convenient for CDR and voice recordings. The only limitation, the seller does not want to send it by post. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Cablecom offline?
my cable connection got online few minutes ago. The DNS servers were not reachable, so 8.8.8.8 was a good workaround ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Swisscom Business Light VDSL with Cisco Router
I would expect the service provider to provide tested configuration templates and recommendations... but I've seen too many examples of completely different behavior :) From: Lukas Eisenberger lukas.eisenberger.mailingl...@gmail.com To: swinog@lists.swinog.ch Sent: Tuesday, March 13, 2012 11:51 AM Subject: [swinog] Swisscom Business Light VDSL with Cisco Router Hi I need to configure a Cisco router (VDSL) for a customer with Swisscom Business light contract. Does somebody has a config template of an existing cisco router? Please contact me off list. Thanks in advance. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] aside from my economical warfare problems: a simple, python pexpect based cisco config archiver to SVN (not using SFTP but the CLI).
I probably forgot to mention the vendor-specific plugins: https://github.com/ssinyagin/gerty-plugins From: Marco Fretz marco.fr...@gmail.com I'm planning to check out gerty as it seems promising and look like a good approach to combine and centralize some serious tasks while keeping the modularity and customization options like monitoring integration, custom revision control, etc. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring
here's a bunch of tools I developed for Sunrise: http://sourceforge.net/projects/toponet/ If I would do it now, I would do it with gerty: https://github.com/ssinyagin/gerty From: Jeroen Massar jer...@unfix.org To: Marco Fretz marco.fr...@gmail.com Cc: swinog@lists.swinog.ch Sent: Friday, February 3, 2012 10:01 AM Subject: Re: [swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring On 2012-02-03 09:29 , Marco Fretz wrote: Hi SwiNOGers, I started searching the web for a good solution on this task years ago. There was and is as far I can tell no actual SNMP MIB for monitoring IPv6 BGP and OSPFv3. The only thing that could be a solution is this already expired IETF draft http://tools.ietf.or/html/draft-ietf-idr-bgp4-mibv2-10 Can anyone give me an idea of how you are monitoring your IPv6 BGP peers and OSPFv3 neighbors (stuff like Status, prefixes, etc..)? Depending on the device, telnet/ssh into it, execute the relevant 'show bgp neigh' command and use that. Not ideal and one has to do this generally for a variety of things, but it avoids this weird thing called SNMP ;) ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring
BGP peering information (ipv6 and 32-bit ASN) is simply not available via SNMP -- on both Cisco and Juniper. So, you end up with CLI parsing if you really need that. With Junipers, there's also an XML interface which is easier to process and is more reliable (with Cisco CLI, linebreaks are sometimes a pain). IOS XR also provides an XML interface, but I never had a chance to check if BGP peering information is in there. From: Marco Fretz marco.fr...@gmail.com To: swinog@lists.swinog.ch Sent: Friday, February 3, 2012 2:58 PM Subject: Re: [swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring Thanks for the answers. Maybe I've to clarify that I need this for Cisco only at the moment. So can I take this as a there is no working snmp mib / implementation yet? It's somehow a shame that Cisco has IPv6 routing protocols working for years and no working snmp (even not a proprietary) solution yet. Please correct me if I'm wrong. I'll have a look at gerty, sounds promising, also for other applications, but I'm still looking for an snmp solution because it's just ugly to use console commands (in whatever way) to query simple counters and status information when you already have the whole network monitored and graphed by snmp. Marco On Fri, Feb 3, 2012 at 10:01 AM, Jeroen Massar jer...@unfix.org wrote: On 2012-02-03 09:29 , Marco Fretz wrote: Hi SwiNOGers, I started searching the web for a good solution on this task years ago. There was and is as far I can tell no actual SNMP MIB for monitoring IPv6 BGP and OSPFv3. The only thing that could be a solution is this already expired IETF draft http://tools.ietf.or/html/draft-ietf-idr-bgp4-mibv2-10 Can anyone give me an idea of how you are monitoring your IPv6 BGP peers and OSPFv3 neighbors (stuff like Status, prefixes, etc..)? Depending on the device, telnet/ssh into it, execute the relevant 'show bgp neigh' command and use that. Not ideal and one has to do this generally for a variety of things, but it avoids this weird thing called SNMP ;) Greets, Jeroen ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] aside from my economical warfare problems: a simple, python pexpect based cisco config archiver to SVN (not using SFTP but the CLI).
a 4-page script with no documentation, no revision control, and hardcoded paths? Some people call it a dirty hack :) For a real software, have a look at https://github.com/ssinyagin/gerty It's not released yet, but already used in a couple of production installations. Plenty of documentation is available. Config backup is just a small part of what it can do :) cheers stan From: Philippe Strauss phi...@philou.ch To: swinog@lists.swinog.ch Sent: Wednesday, January 11, 2012 3:55 PM Subject: Re: [swinog] aside from my economical warfare problems: a simple, python pexpect based cisco config archiver to SVN (not using SFTP but the CLI). yuk must be difficult to get one single dime from a cisco config archiver :-) more seriously, I prefer a 4 pages code I can comprehend and bend at my taste. it was sent to this list when doing some housekeeping of my HDD and oohh, this one may still be usefull to someone else. Le 11 janv. 2012 à 14:34, Peter Siegrist a écrit : for a few dollars more ... take a look at the *MyConf* Cisco config backup, archive and copmpare tool at http://www.myport-tools.ch/ Its not using cvs or svn like rancid but using its own archive structure and in addition it has a graphical web interface. kind regards sigi Philippe Strauss wrote: code is small enough to be bende according to your taste: http://www.philou.ch/cisco-term-backup.html ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Swisscom VDSL - TELIA - USA problem
traceroute and ping response times are just the indication how fast the management board on a particular router is able to send ICMP packets. If the management board is busy, it doesn't mean that the traffic is affected. so, it needs a more detailed investigation with your provider, and most probably the problem lays outside of your ISP's control. Maybe some intermediate link somewhere is oversaturated, but that's not going to be changed at free will. You can only get guaranteed throughput if you buy an end-to-end business connectivity service, but that's going to cost you an arm and a leg. From: Thomas Mueller tho...@chaschperli.ch To: swinog@lists.swinog.ch Sent: Tuesday, January 3, 2012 4:45 PM Subject: [swinog] Swisscom VDSL - TELIA - USA problem Hi a customer got problems with an application (trading tool) downloading from a server in the USA (206.106.137.3). A traceroute below. Responsetime of hop 12 (80.91.251.98) is much higher than hop 11 (80.91.249.113) and a ping test did show lost packets on hop 12 but not on hop 11. the same application runs fine with a http proxy at LayerOne (init7), a proxy on a hosteurope vps or on a Cablecom connection. Is this the right place to report such a problem and aksing for help? Thank you! - Thomas traceroute to 206.106.137.3 (206.106.137.3), 30 hops max, 60 byte packets 1 192.168.14.1 (192.168.14.1) [AS8151/AS28513] 1.394 ms 1.759 ms 1.362 ms 2 10.136.21.195 (10.136.21.195) [AS65534] 12.432 ms 13.231 ms 12.544 ms 3 22-27.186-195.fws.bluewin.ch (195.186.27.22) [AS3303/AS44038] 17.615 ms 18.040 ms 17.171 ms 4 85-27.186-195.fws.bluewin.ch (195.186.27.85) [AS3303/AS44038] 20.192 ms 17.757 ms 17.520 ms 5 tge2-4.zhhia01p-rtdi01.bluewin.ch (195.186.51.5) [AS3303/AS44038] 17.251 ms 17.302 ms 17.138 ms 6 tge2-4.zhhia01p-rtdi01.bluewin.ch (195.186.51.5) [AS3303/AS44038] 17.072 ms 17.700 ms 16.912 ms 7 net1702.zhhdz09p-rtdi01.bluewin.ch (213.3.247.169) [AS3303/AS44038] 17.966 ms 17.929 ms 17.966 ms 8 202-0-186-195.bluewin.ch (195.186.0.202) [AS3303/AS44038] 21.432 ms 19.125 ms 19.938 ms 9 i79tix-005-ae0.bb.ip-plus.net (138.187.129.7) [AS3303] 17.386 ms 17.596 ms 21.142 ms 10 zch-b1-link.telia.net (213.248.90.237) [AS1299] 17.117 ms 17.686 ms 17.173 ms 11 prs-bb1-link.telia.net (80.91.249.113) [AS1299] 25.882 ms 125.402 ms 25.827 ms 12 ash-bb1-link.telia.net (80.91.251.98) [AS1299] 108.584 ms 113.053 ms ash-bb1-link.telia.net (80.91.252.36) [AS1299] 158.407 ms 13 level3-ic-130870-ash-bb1.c.telia.net (213.248.89.178) [AS1299] 114.600 ms 114.618 ms 124.009 ms 14 vlan80.csw3.Washington1.Level3.net (4.69.149.190) [AS3356] 120.899 ms 120.495 ms 120.235 ms 15 ae-72-72.ebr2.Washington1.Level3.net (4.69.134.149) [AS3356] 113.387 ms 114.457 ms ae-82-82.ebr2.Washington1.Level3.net (4.69.134.153) [AS3356] 120.064 ms 16 ae-3-3.ebr1.NewYork2.Level3.net (4.69.132.90) [AS3356] 112.147 ms 112.035 ms 112.211 ms 17 ae-1-100.ebr2.NewYork2.Level3.net (4.69.135.254) [AS3356] 116.964 ms 116.742 ms 110.879 ms 18 ae-5-5.car2.Stamford1.Level3.net (4.69.142.81) [AS3356] 116.335 ms 123.342 ms 116.644 ms 19 INTERACTIVE.car2.Stamford1.Level3.net (4.26.50.110) [AS3356] 122.280 ms 117.676 ms 116.042 ms 20 www.interactivebrokers.com (206.106.137.3) [AS11449] 118.604 ms 117.565 ms 118.602 ms 22ms ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] ALU ISAM 7330
hi all, is anyone using Alcatel ISAM 7330 and managing it with third-party SNMP tools? There's a problem that the SNMP interface indexing is not documented in the MIBs, so it's nontrivial to derive the line names from IF-MIB entries. If anyone has already addressed this problem, please contact me off-list. thanks, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] looking for a virtual PBX provider
I ended up in building the solution myself. here I publish some work-in-progress details if you're interested: http://txlab.wordpress.com/tag/pbx/ Also I'll be glad to use my new knowledge for someone's project if there's a need for a similar solution. From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Sent: Tuesday, September 6, 2011 11:04 AM Subject: [swinog] looking for a virtual PBX provider hi all, I'm building a technical infrastructure for a new on-call support service. This will require a virtual PBX where the support engineers would login and manage the hotline redirection to their personal PSTN or SIP destinations. Those interested in providing such a service, please contact me off-the-list, and I'll send you detailed technical requirements. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] new Torrus+extopus demo is ready
hi all, the new demo site for Torrus and Extopus software is up and running: http://demo.oetiker.torrus.net/ Extopus presents a service-oriented view, and is designed to be embedded into customer self-service portals. If needed, I'll be able to present the details on the next SwiNOG meeting. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Need real devices for a Torrus demo
thanks everyone for their kind offers. Now we've got enough real-life data for the demo server. From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Cc: Tobias Oetiker t...@oetiker.ch Sent: Saturday, September 10, 2011 3:03 PM Subject: Re: [swinog] Need real devices for a Torrus demo hi all, we're still searching for a few more devices to poll. As you can see here with the first device, all confidential information is completely removed: http://demo.oetiker.torrus.net/torrus/ cheers, stan From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Cc: Tobias Oetiker t...@oetiker.ch Sent: Monday, September 5, 2011 10:30 AM Subject: [swinog] Need real devices for a Torrus demo hi, Tobi Oetiker and myself are setting up a new demo server for Torrus and Extopus software. In order to present some real-life data, we need a few devices with some real traffic on them. Your company would be credited on the demo description page, of course. The devices would be polled every 5 minutes. IF-MIB and some vendor-specific MIBs are going to be used (for example, CPU and memory stats for Cisco devices). Torrus will present a classic device-centric view, with SNMP location and contact information, and with port descriptions exposed to the public. Extopus will present a service-centric view, with customer services grouped by various attributes, such as contract number or location. Two different views will be presented: administrator's interface would display all the available customers, and customer's own interface would display only the services belonging to its contract. So, we need several routers or switches with some traffic on their ports. We would access the devices via IPv4 or IPv6, with SNMPv2 or SNMPv3 protocol, depending on your security requirements. Every OID would only be polled every 5 minutes. Torrus would spread the SNMP load in order to reduce the CPU impact on the device, and send its requests with 60-second interval. Please contact me off-list for details. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Need real devices for a Torrus demo
hi all, we're still searching for a few more devices to poll. As you can see here with the first device, all confidential information is completely removed: http://demo.oetiker.torrus.net/torrus/ cheers, stan From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Cc: Tobias Oetiker t...@oetiker.ch Sent: Monday, September 5, 2011 10:30 AM Subject: [swinog] Need real devices for a Torrus demo hi, Tobi Oetiker and myself are setting up a new demo server for Torrus and Extopus software. In order to present some real-life data, we need a few devices with some real traffic on them. Your company would be credited on the demo description page, of course. The devices would be polled every 5 minutes. IF-MIB and some vendor-specific MIBs are going to be used (for example, CPU and memory stats for Cisco devices). Torrus will present a classic device-centric view, with SNMP location and contact information, and with port descriptions exposed to the public. Extopus will present a service-centric view, with customer services grouped by various attributes, such as contract number or location. Two different views will be presented: administrator's interface would display all the available customers, and customer's own interface would display only the services belonging to its contract. So, we need several routers or switches with some traffic on their ports. We would access the devices via IPv4 or IPv6, with SNMPv2 or SNMPv3 protocol, depending on your security requirements. Every OID would only be polled every 5 minutes. Torrus would spread the SNMP load in order to reduce the CPU impact on the device, and send its requests with 60-second interval. Please contact me off-list for details. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] looking for a virtual PBX provider
hi all, I'm building a technical infrastructure for a new on-call support service. This will require a virtual PBX where the support engineers would login and manage the hotline redirection to their personal PSTN or SIP destinations. Those interested in providing such a service, please contact me off-the-list, and I'll send you detailed technical requirements. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Need real devices for a Torrus demo
I can also screen the port descriptions if they contain any confidential information. - Original Message - From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Cc: Tobias Oetiker t...@oetiker.ch Sent: Monday, September 5, 2011 10:30 AM Subject: [swinog] Need real devices for a Torrus demo hi, Tobi Oetiker and myself are setting up a new demo server for Torrus and Extopus software. In order to present some real-life data, we need a few devices with some real traffic on them. Your company would be credited on the demo description page, of course. The devices would be polled every 5 minutes. IF-MIB and some vendor-specific MIBs are going to be used (for example, CPU and memory stats for Cisco devices). Torrus will present a classic device-centric view, with SNMP location and contact information, and with port descriptions exposed to the public. Extopus will present a service-centric view, with customer services grouped by various attributes, such as contract number or location. Two different views will be presented: administrator's interface would display all the available customers, and customer's own interface would display only the services belonging to its contract. So, we need several routers or switches with some traffic on their ports. We would access the devices via IPv4 or IPv6, with SNMPv2 or SNMPv3 protocol, depending on your security requirements. Every OID would only be polled every 5 minutes. Torrus would spread the SNMP load in order to reduce the CPU impact on the device, and send its requests with 60-second interval. Please contact me off-list for details. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] New list for jobs
You're basically spending your time to provide a free service for what recruiters are used to pay. Those who need a new job will anyway search at the job sites. On the other hand, here's an example of a free job ad service: http://jobs.perl.org/ but it's a bit different from a mailing list with disabled archiving ;) From: Fredy Kuenzler kuenz...@init7.net To: swinog@lists.swinog.ch Sent: Tuesday, August 23, 2011 9:14 AM Subject: Re: [swinog] New list for jobs Am 23.08.2011 08:20, schrieb Per Jessen: To answer some little unhappyness from Viktor, Per and Stanislav, It is to allow more offers to be posted, especially from job-agencies. We have done this because we were asked by an agency to regularly post on the general list and we refused. Okay, that makes a lot more sense. Perhaps the list would have been better named jobads :-) The community should decide. If noone would subscribe to swinog-jobs, it simply would die again. But it seems that quite a big chunk of the community is interested in job advertising. As of now 72 subscribers are registered at swinog-jobs. For comparison: swinog has 917 subscribers. F. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] New list for jobs
as far as I can recall, there were like 20 job-related messages in the past 12 months. So, what's the point in segregation? Also such a list without archives is quite useless for both parties, employers and employees. From: Pascal Gloor pascal.gl...@spale.com To: swi...@swinog.ch Sent: Monday, August 22, 2011 1:35 PM Subject: [swinog] New list for jobs Dear all, As per SwiNOG Organisation board decision, a new mailing list has been opened, swinog-j...@lists.swinog.ch Topics are: - Jobs offering - Jobs seeking - Discussions about the job market At least one company, Oprandi Partner, will be pushing SwiNOG relevant job offers. SwiNOG Relevant = Networking, Programming (WebDev is here too), System Administration and Helpdesk (starting at 2nd level helpdesk). Rules: - swinog@: Jobs topics will no more be tolerated on the main list (no sanctions are planned for trespassers, feel free to self-regulate this by pointing the jobs list to the trespassers :P) - swinog-jobs@: No archive of the list. - swinog-jobs@: Member list is strictly private (to ensure no email harvesting will be done). - swinog-jobs@: No huge postings, offers must be linked (max email size = 40kb) - swinog-jobs@: accepted-languages: en, de, fr, it; prefered-language: en;\n\n If you're interested in the new list (it doesn't matter if you're looking for a jobs or not, you might just be interested to know what's going on), please subscribe here: -- http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog-jobs -- See you, Pascal ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] New list for jobs
well, that's a different story. They simply want a free service instead of paying this: http://www.jobserve.com/Recruiter/JobCreditsSelect.aspx so, you can simply say no :) From: Pascal Gloor pascal.gl...@spale.com To: swi...@swinog.ch Sent: Monday, August 22, 2011 10:52 PM Subject: Re: [swinog] New list for jobs To answer some little unhappyness from Viktor, Per and Stanislav, It is to allow more offers to be posted, especially from job-agencies. We have done this because we were asked by an agency to regularly post on the general list and we refused. If it's useless, we'll delete the list, we have done this in the past. And as for the prohibition to post offers here, nobody will ever complain if an ISP posts a job offer for himself but I definitely don't want to see agencies mass-posting here. Cheers, Pascal ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] SIP gateway service documentation
RFC compliance is not a problem, but still there are SP-specific requirements on how these RFCs are supported and what the SP expects from our side. Also important, what SP is going to send toward us :) For example, the numbering plan. Calls to UK, for example, should not be 0044.*, but 44.* with phone-context=national. I've got this information via a phone conversation, and not in a written document. Everything works now, I'm just wondering if it's a standard practice to deliver such a poor documentation. From: Jean-Pierre Schwickerath swi...@hilotec.net To: swinog@lists.swinog.ch Cc: Stanislav Sinyagin ssinya...@yahoo.com Sent: Thursday, August 18, 2011 10:52 AM Subject: Re: [swinog] SIP gateway service documentation Hello Stan The SP puts forward a number of requirements, such as national/international context in To: field, then some special requirements for CallerID privacy, etc. The problem is, we can't get a document that describes the technical details of the interface, and SP refuses to create such a document. All we've got is a number of emails and some information from phone conversations. SIP and its extensions are fairly well standardized. Have a look at http://www.packetizer.com/ipmc/sip/standards.html for an overview of those RFCs. We all know the PBX manufacturers and their developers seldom fully comply to the standards so they should give you a good starting point on how it's supposed to be done. You will have to test each and every case with your SP unless he can garantee you he has implemented it fully standard compliant. Is it a common situation for such a service? Am I too naive with my expectations to receive a fully documented service? If it were a no-name lousy cheap service provider, I wouldn't ask :) We never had any issues when connecting SIP trunks to a provider as long as they were using RFC compliant SIP (IMHO the RFC compliance is a major decision point when choosing the SP). And I second you on the point that the SP should document its extensions to the protocol if they are not standard compliant extensions. Regards Jean-Pierre -- HILOTEC Engineering + Consulting AG - Langnau im Emmental Energietechnik und Datensysteme: Server, PCs, Linux, Telefonanlagen, VOIP, Hosting, Datenbanken, Entwicklung, Komplettlösungen für KMUs Tel: +41 34 402 74 00 - http://www.hilotec.com/ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] SIP gateway service documentation
in that example, I meant phone-context=international, of course :) From: Stanislav Sinyagin ssinya...@yahoo.com To: Jean-Pierre Schwickerath swi...@hilotec.net; swinog@lists.swinog.ch swinog@lists.swinog.ch Sent: Thursday, August 18, 2011 11:29 AM Subject: Re: [swinog] SIP gateway service documentation RFC compliance is not a problem, but still there are SP-specific requirements on how these RFCs are supported and what the SP expects from our side. Also important, what SP is going to send toward us :) For example, the numbering plan. Calls to UK, for example, should not be 0044.*, but 44.* with phone-context=national. I've got this information via a phone conversation, and not in a written document. Everything works now, I'm just wondering if it's a standard practice to deliver such a poor documentation. From: Jean-Pierre Schwickerath swi...@hilotec.net To: swinog@lists.swinog.ch Cc: Stanislav Sinyagin ssinya...@yahoo.com Sent: Thursday, August 18, 2011 10:52 AM Subject: Re: [swinog] SIP gateway service documentation Hello Stan The SP puts forward a number of requirements, such as national/international context in To: field, then some special requirements for CallerID privacy, etc. The problem is, we can't get a document that describes the technical details of the interface, and SP refuses to create such a document. All we've got is a number of emails and some information from phone conversations. SIP and its extensions are fairly well standardized. Have a look at http://www.packetizer.com/ipmc/sip/standards.html for an overview of those RFCs. We all know the PBX manufacturers and their developers seldom fully comply to the standards so they should give you a good starting point on how it's supposed to be done. You will have to test each and every case with your SP unless he can garantee you he has implemented it fully standard compliant. Is it a common situation for such a service? Am I too naive with my expectations to receive a fully documented service? If it were a no-name lousy cheap service provider, I wouldn't ask :) We never had any issues when connecting SIP trunks to a provider as long as they were using RFC compliant SIP (IMHO the RFC compliance is a major decision point when choosing the SP). And I second you on the point that the SP should document its extensions to the protocol if they are not standard compliant extensions. Regards Jean-Pierre -- HILOTEC Engineering + Consulting AG - Langnau im Emmental Energietechnik und Datensysteme: Server, PCs, Linux, Telefonanlagen, VOIP, Hosting, Datenbanken, Entwicklung, Komplettlösungen für KMUs Tel: +41 34 402 74 00 - http://www.hilotec.com/ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] swinog Digest, Vol 79, Issue 1: remotely-controlled network tests, like packet capture
I looked up 255E-13DQws specs on Acer web site, and it says 6-cell. I bought previously a slightly different model at Interdiscount for CHF299.-, and it had 6 cells. I'll have a closer look when I pass by the M-Electronics shop next time. - Original Message - From: robert.guentensper...@swisscom.com robert.guentensper...@swisscom.com To: swinog@lists.swinog.ch Cc: Sent: Tuesday, August 2, 2011 2:44 PM Subject: Re: [swinog] swinog Digest, Vol 79, Issue 1: remotely-controlled network tests, like packet capture Ähmm Stan, | 6-cell battery (!) Spezifikationen (on Detail page) ... Akku Technologie 3 cell Li-ion Battery up to 4 hour battery life ^^ Cheers, Günti |-Original Message- |From: swinog-boun...@lists.swinog.ch [mailto:swinog- |boun...@lists.swinog.ch] On Behalf Of Stanislav Sinyagin |Sent: Tuesday, August 02, 2011 2:33 PM |To: swinog@lists.swinog.ch |Subject: Re: [swinog] swinog Digest, Vol 79, Issue 1: remotely- |controlled network tests, like packet capture | | | | | |- Original Message - | From: Fischer, Martin martin.fisc...@swisstxt.ch | To: swinog@lists.swinog.ch | Cc: | Sent: Tuesday, August 2, 2011 1:30 PM | Subject: Re: [swinog] swinog Digest, Vol 79, Issue 1: remotely- |controlled network tests, like packet capture | | Stanislav Sinyagin ssinya...@yahoo.com wrote: | | Migros is selling a cheap netbook for CHF 222.- | http://goo.gl/1tZ5C | Acer Aspire One AOD 255E-13DQws | 1024x600 screen, 1GB RAM, 250GB disk | 6-cell battery (!) | | It's a perfect device for remotely-controlled network tests, like | packet capture or any telnet/snmp/SIP/perlscript testing | scenarios that you like. | | (...) | | My Experience is that notebooks are not realy useful for packet | sniffing...as more an more Gibabit is common and laptops are no a | recommended option to measure data transmission. | | Especialy when capture filters will be used... | | Also the available disc space is very limited... | | I prefer older server infrastructure, that is able to run captures |from | several points with 2-4 or more NIC's in a ringbuffer configuration... | | |You are right in the sense that the right tool should be used for the |right job :) | |Of course it's not suitable for high-bandwidth sniffing, although quite |useful for |the occasions where you don't have high-volume traffic. |For example, I use one such notebook for an IP-telephony deployment near |the |border controllers. As it's not yet in production, I know exactly how |much traffic |I'm going to have. | |The benefit is that I easily bring this notebook to the customer |location, |and it doesn't need much (rack)space. Also I don't have to ask the |customer to |provide new PC hardware. | | |___ |swinog mailing list |swinog@lists.swinog.ch |http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Cheap Acer netbooks at Migros
UPD: it has a 3-cell battery. well, still a good value for money. - Original Message - From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch swi...@swinog.ch Cc: Sent: Sunday, July 31, 2011 2:01 PM Subject: [swinog] Cheap Acer netbooks at Migros Migros is selling a cheap netbook for CHF 222.- http://goo.gl/1tZ5C Acer Aspire One AOD 255E-13DQws 1024x600 screen, 1GB RAM, 250GB disk 6-cell battery (!) It's a perfect device for remotely-controlled network tests, like packet capture or any telnet/snmp/SIP/perlscript testing scenarios that you like. Ubuntu runs immediately with full hardware support. CentOS 5 would not run: atl1c NIC driver is missing, so those pre-configured Asterisk boxes won't run. Windows, of course, gets thrown away immediately :) Usually you get a 3-cell battery in a 300-franks notebook, but this one is coming with a decent 6-cell one. It's enough to watch movies for 4 hours in a row. 1024x600 screen is too smal for any real work, but quite good for Internet browsing and perfect for movies. RAM is easy to upgrade to 2GB, but watch out the RAM clocking. As far as I recall, CL9 works, and others do not. The easiest way to check is to open the box and see what's inside. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Cheap Acer netbooks at Migros
Migros is selling a cheap netbook for CHF 222.- http://goo.gl/1tZ5C Acer Aspire One AOD 255E-13DQws 1024x600 screen, 1GB RAM, 250GB disk 6-cell battery (!) It's a perfect device for remotely-controlled network tests, like packet capture or any telnet/snmp/SIP/perlscript testing scenarios that you like. Ubuntu runs immediately with full hardware support. CentOS 5 would not run: atl1c NIC driver is missing, so those pre-configured Asterisk boxes won't run. Windows, of course, gets thrown away immediately :) Usually you get a 3-cell battery in a 300-franks notebook, but this one is coming with a decent 6-cell one. It's enough to watch movies for 4 hours in a row. 1024x600 screen is too smal for any real work, but quite good for Internet browsing and perfect for movies. RAM is easy to upgrade to 2GB, but watch out the RAM clocking. As far as I recall, CL9 works, and others do not. The easiest way to check is to open the box and see what's inside. cheers, stan ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] swinog Digest, Vol 75, Issue 10
but you already failed two interview tests: you answered to a wrong address and you used English in some strange way :) From: shibu shibu shibu...@hotmail.com To: swinog@lists.swinog.ch Sent: Tue, April 12, 2011 12:51:41 PM Subject: Re: [swinog] swinog Digest, Vol 75, Issue 10 Dear Peter, I would like to join which mentioned below post. ThanksRegards Shibu.A Mob +973 39304862 Email: shibu...@hotmail.com shib...@gmail.com ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] 39/8 and 106/8 allocated to APNIC
From: Manfredo Miserocchi m...@wari.net Sent: Tue, February 1, 2011 8:30:43 AM Subject: Re: [swinog] 39/8 and 106/8 allocated to APNIC ...so IPv4 numbers are finished !! In effect we still have the last 5 /8s, but they're reserved for the last /8 policy. The counter shows zero :( http://www.wari.net/ipv4exh.htm Hurricane Electric is a bit more optimistic: 1 days remaining :) http://ipv6.he.net/ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] SMS from analog modem
why not using a Siemens GSM terminal? It has the same RS232 port and AT command set, and you don't need a copper line (you would of course need a SIM card). - Original Message From: julien mabillard m...@mbuf.net To: swinog@lists.swinog.ch Sent: Fri, December 10, 2010 11:28:18 AM Subject: [swinog] SMS from analog modem Hi, does anyone here remember or uses an analog modem connected to PSTN to send SMS? It is not for GSM modem, but plain old analog modem. What were the AT instructions to send? What Swisscom gateway phone number do you use? Thank you very much. -- * full references : https://mbuf.net/ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] Self-care DNS management solution
hi, I'm looking for a solution (standalone software or an outsourced service) with the following requirements: -- Leased-line customers manage PTR records for their IPv4 and IPv6 address blocks -- They also manage A, AAA, and other possible records in their domains -- Northbound system manages the customer accounts, their domains, and allocated IP address space -- Scalability to 1 customer accounts The system should require as little as possible manual interaction. Your suggestions will be appreciated. cheers, stan +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Self-care DNS management solution
typo: of course :) - Original Message From: Stanislav Sinyagin ssinya...@yahoo.com To: swi...@swinog.ch Sent: Thu, November 11, 2010 12:38:48 PM Subject: [swinog] Self-care DNS management solution hi, I'm looking for a solution (standalone software or an outsourced service) with the following requirements: -- Leased-line customers manage PTR records for their IPv4 and IPv6 address blocks -- They also manage A, AAA, and other possible records in their domains -- Northbound system manages the customer accounts, their domains, and allocated IP address space -- Scalability to 1 customer accounts The system should require as little as possible manual interaction. Your suggestions will be appreciated. cheers, stan +41 79 407 0224 ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog