Re: [swinog] Telegram group

[Viktor Steinmann]

Whow, just whow

After years of this mailing list slowly rotting away, someone takes an 
approach and tries to give back life to the group.


And now suddenly, people are crawling from beneath their rocks and have 
much better ideas, on how this could have been done all along.


Crawl back under your rock, please.  You had all the time in the world 
to do something and didn't.


I applaud Max for his initiative.

Cheers,

Viktor



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] JunOS Filter Question

[Viktor Steinmann]

Dear SwiNOGers

Thank you for all the off-list answers.

Problem is solved. PEBKAC.

Kind regards,

Viktor

On 30.01.2019 14:43, Viktor Steinmann wrote:

Dear SwiNOGers

I'm new to JunOS. I like this OS so far, but I'm having a hard time, 
securing this stuff...


Something's wrong in my JunOS filters...  Basically I want to block 
everyone from accessing the interface on the router itself, but I want 
to allow traffic to pass the interface. Somehow that doesn't work. See 
below the (relevant) configuration parts:


interfaces {
   xe-0/1/2 {
    description blabla;
    vlan-tagging;
    }
    unit 100 {
    description Blabla;
    vlan-id 100;
    family inet {
    filter {
    input INTERFACE-INCOMING;
    }
    address 192.168.1.1/24
    }
    }
}


policy-options {
    prefix-list MYINTERFACE {
    192.168.1.1/32;
    }
}

firewall {
    family inet {
    filter INTERFACE-INCOMING {
    term WAN-ADDRESS {
    from {
    destination-prefix-list {
    MYINTERFACE;
    }
    }
    then {
    discard;
    }
    }
    term ALLOW-ALL {
    then accept;
    }
    }
    }
}


Anybody with a hint, why this filter doesn't actually block traffic to 
192.168.1.1? I can still ping it.


Kind regards,

Viktor



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] JunOS Filter Question

[Viktor Steinmann]

Dear SwiNOGers

I'm new to JunOS. I like this OS so far, but I'm having a hard time, 
securing this stuff...


Something's wrong in my JunOS filters...  Basically I want to block 
everyone from accessing the interface on the router itself, but I want 
to allow traffic to pass the interface. Somehow that doesn't work. See 
below the (relevant) configuration parts:


interfaces {
   xe-0/1/2 {
    description blabla;
    vlan-tagging;
    }
    unit 100 {
    description Blabla;
    vlan-id 100;
    family inet {
    filter {
    input INTERFACE-INCOMING;
    }
    address 192.168.1.1/24
    }
    }
}


policy-options {
    prefix-list MYINTERFACE {
    192.168.1.1/32;
    }
}

firewall {
    family inet {
    filter INTERFACE-INCOMING {
    term WAN-ADDRESS {
    from {
    destination-prefix-list {
    MYINTERFACE;
    }
    }
    then {
    discard;
    }
    }
    term ALLOW-ALL {
    then accept;
    }
    }
    }
}


Anybody with a hint, why this filter doesn't actually block traffic to 
192.168.1.1? I can still ping it.


Kind regards,

Viktor



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] CANCELLED: SwiNOG-BE169

[Viktor Steinmann]

Dear SwiNOGers,

Due to scheduling conflicts, I'll have to cancel the announced Beer 
Event on Monday, 3rd December 2018.


It seems, the Beer Events have come to an end. If someone would like to 
take the lead for 2019, please let me and/or Steven know off-list.


Kind regards,
Viktor (aka Stony)



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG-BE168 - Beer Event 168 - The Farewell Event @ Restaurant Schlachthof / ZH

[Viktor Steinmann]

Dear SwiNOGers,

The last Beer Event featuring Candid. Let's join in the Schlachthof to 
wish him all the best for his future.


Details for the next event:
---
Event:    SwiNOG-BE168 - Beer Event 168 - The Farewell Event

When?    Monday, 1st October 2018 18:30

Where?    Restaurant Schlachthof
    Herdernstrasse 59, Zürich
    http://www.restaurant-schlachthof.ch
    (GoogleMaps Link: http://goo.gl/maps/1UsakLjWKcT2)

Places available? 10

!! Please sign up if you're really coming - because the seats are 
limited! !!


---

Registration:

Start:    Wednesday, 12th September 2018  - 10:00
Stop:    Friday, 28th September 2018  - 16:00

Reg-URL: http://swinog.be/

---

Since we have to make reservations, I need to know who's coming and who not.
If you can't attend and you're registered please inform me ASAP (078 602 
95 18).


Kind regards,
Viktor (aka Stony)



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swinog-BE167 - Beer Event 167 @ Kings Cave / ZH

[Viktor Steinmann]

Dear SwiNOGers,

After the bad news about the end of the SWITCH mirror, everyone needs some good 
news.
Let's have some beer and food.
And because of its central (pun intended) location, we're again descending into 
the cave. The King's Cave.

Details for the next event:
---
Event:  Swinog-BE167 - Beer Event 167

When?   Monday, 3rd September 2018 18:30

Where?  Kings Cave
Central 1, 8001 Zürich
http://central.ch/portfolio_page/kings-cave/
(GoogleMaps Link: http://goo.gl/maps/H1ez7HeF6x72)

Places available? 10

!! Please sign up if you're really coming - because the seats are limited! !!

---

Registration:

Start:  Thursday, 23rd August 2018  - 15:00
Stop:   Friday, 31st August 2018  - 16:00

Reg-URL: http://swinog.be/

---

Since we have to make reservations, I need to know who's coming and who not.
If you can't attend and you're registered please inform me ASAP (078 602 95 18).

Kind regards,
Viktor (aka Stony)



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] mirror.switch.ch to be closed down

[Viktor Steinmann]

Thanks for bringing this to our attention Fredy. Most of us would have 
missed it probably.


It's a pity, they're shutting down this service. This has been an 
institution. Reliable and trusted.


Unfortunately, there is no real explanation, why they're discontinuing 
the service. Care to comment, SWITCH, please?


Kind regards,

Viktor


On 22.08.2018 15:40, Fredy Kuenzler wrote:

SWITCH announced that they plan to close down mirror.switch.ch. See
announcement http://mirror.switch.ch/

I personally think this is very sad. In the name of the community I
would like to thank SWITCH for their support over all these years.

However I would like to start the discussion how we can keep
mirror.switch.ch alive as a community effort.

Can the decision makers at SWITCH please explain the preconditions?
Funding for new hardware? Throw in some bandwidth? Colocation? Server
management?

Please discuss.



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swinog-BE166 - Beer Event 166 @ Korner / ZH

[Viktor Steinmann]

Dear SwiNOGers,

Burger Time!

Let's have a tasty Hipster-Burger and a matching beer.

Details for the next event:
---
Event:  Swinog-BE166 - Beer Event 166

When?   Monday, 4th June 2018 18:30

Where?  Korner
Gartenstrasse 10, 8002 Zürich
http://www.gourmetburger.ch
(GoogleMaps Link: http://goo.gl/maps/ivl9b)

Places available? 10

---

Registration:

Start:  Monday, 28th May 2018  - 08:00
Stop:   Friday, 1st June 2018  - 16:00

Reg-URL: http://swinog.be/

---

Since we have to make reservations, I need to know who's coming and who not.
If you can't attend and you're registered please inform me ASAP (078 602 95 18).

Kind regards,

Viktor Steinmann (aka Stony)



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swinog-BE165 - Beer Event 165 @ Kings Cave / ZH

[Viktor Steinmann]

Dear SwiNOGers,

This is the rebirth of the legendary SwiNOG Beer Event.

We'll have some nice meat (the John Stone Entrecote is fantastic) and of course 
a nice beer.

Details for the next event:
---
Event:  Swinog-BE165 - Beer Event 165

When?   Monday, 9th April 2018 19:00

Where?  Kings Cave
Central 1, 8001 Zürich
http://central.ch/portfolio_page/kings-cave/
(GoogleMaps Link: http://goo.gl/maps/H1ez7HeF6x72)

Places avaiable? 10

!! Please sign up if you're really coming - because the seats are limited! !!


---

Registration:

Start:  Tuesday, 27th March 2018  - 15:00
Stop:   Thursday, 5th April 2018  - 14:00

Reg-URL: http://swinog.be/

---

Since we have to make reservations, I need to know who's coming and who not.
If you can't attend and you're registered please inform me ASAP (078 602 95 18).

Kind regards,

Viktor Steinmann (aka Stony)



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Beer Events 2018

[Viktor Steinmann]

Dear fellow SwiNOGers

I have decided, to organize some Beer Events in the Zurich area for 2018, as 
the tradition must live on...

Here are the dates for 2018:

Monday, 9. April 2018
Monday, 4. June 2018
Monday, 3. September 2018
Monday, 1. October 2018
Monday, 3. December 2018

As you can see, we'll have only 5 events, but that's still better than nul.

The invitation for the individual event will pop up about 10 days before the 
actual event on this list. Stay tuned!

Kind regards,
Viktor



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] DNSSEC Training with PowerDNS

[Viktor Steinmann]

Hi Michael

It seems, there's quite an interest in this, as the training in Zurich 
is already fully booked. Any chance for a 2nd training in Zurich?


Kind regards,

Viktor


On 27.02.2018 16:13, Michael Hausding wrote:

Dear all

SWITCH is organising a one day DNSSEC training together with PowerDNS

The training will be given at the following dates:

9.4. Zurich, SWITCH
10.4. Bern, Uni
11.4. Carouge HESGE



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] What email headers need to be understood by a PGP/MIME enabled email client?

[Viktor Steinmann]

How about the Enigmail-Plugin for Thunderbird?


On 15.02.2018 15:35, Benoit Panizzon wrote:

Well, I know no clients which support RFC4880 when generating or decoding PGP
encrypted emails. How about the SWINOG Community?




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] datacomm/vtxnet and quicknet/kfsb are missing TLS on their mailservers

[Viktor Steinmann]

Mimimi? Seriously?

If you chose to configure TLS mandatory, you'll have to live with the 
fact, that some servers will not offer this service.


Don't try to force others to apply your policy, instead relax your own 
policy. You can still monitor your maillog for non-TLS connections and 
from time to time ask identified mail-admins politely to update their 
policy.


Cheers,

Viktor


On 02.02.2018 09:36, Peter Keel wrote:

Hi

I get these errors:

| TLS is required, but was not offered by host mx1.datacomm.ch[212.40.2.32]

and

| TLS is required, but was not offered by host relay.kfsb.ch[213.202.32.8]

Since I've made TLS for SMTP mandatory. The respective admins of these servers
might want finally at least enable voluntary TLS; some of their customers
apparently would like to receive mails from my server.

And by the way, RFC 2487 that is referred to for instance in the postfix manpage
and stated that one must not make TLS mandatory has been obsoleted by RFC 3207.

Cheers
Seegras




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swinog-be?

[Viktor Steinmann]

Guys... is there any news on this topic?

Regards,
Viktor

On 23.05.2017 20:18, Steven Glogger wrote:

Emanuel & Co.

Is there still any beer event?

gruss

-steven


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] UPC Mailservers problems with greylisting

[Viktor Steinmann]

On 04.01.2017 08:54, Per Jessen wrote:


Is there any point in greylisting genuine mailservers?  We only greylist
dodgy-looking setups.


/Per

I don't see how this approach would scale. We greylist everything. If 
some mail servers appear to have a problem with that and are legit, they 
are whitelisted. That approach scales for us.


Kind regards,

Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Zurich SwiNOG Beering 2017, dates, agenda, suggestions

[Viktor Steinmann]

On 22.12.2016 13:22, jerome.tissie...@swisscom.com wrote:

I work sometimes in Zurich but unfortunately my German is a disaster, is there 
any non-german speaking people coming sometimes?
We've had non-german speaking joiners from time to time. As long as you 
don't expect anyone to speak french, there's no issue. ;-)


Kind regards,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Zurich SwiNOG Beering 2017, dates, agenda, suggestions

[Viktor Steinmann]

On 20.12.2016 15:37, Gregor Riepl wrote:
How about Bern, Lausanne, Basel, St. Gallen, or somewhere else once in 
a while?


The original idea of the beer event was, to meet with a smaller group of 
geeks more often than during the "official" SwiNOG meetings, locally. We 
started our "chapter" in Zurich, because that's where I worked at the 
time (I'm the founder of this event, together with Steven Glogger).


There have been some Beer Events in Geneva as well iirc and maybe even 
in Berne? Please continue that if the need is there!


Kind regards,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] TCP timestamps

[Viktor Steinmann]

Dear André

 

Ignore this crap. Really.

 

We do 1-2 external security audits per year and I’ve seen incredible crap in 
those reports. My favorites are things like “Hostname mail.domain.com suggests 
this is a mail server. Consider changing it to something not so obvious.” and a 
few lines further down: “Detected open port 25 on server mail.domain.com. 
Attackers could abuse this knowledge. Consider changing the port to something 
else”, etc.. The worst I ever encountered was that in the report they were 
complaining, that there’s a firewall in place that blocks ports and/or certain 
ICMP types... :-O

 

During the last few years I’ve learned, that these things are more or less 
unchanged output copy/pastes from automated hacking tools. If an audit company 
does not filter out such crap, you might as well consider changing your 
provider.

 

One more: “Server with IP x.x.x.x with DNS name www.domain.com 
  responds to Port 80” (not mentioning, that the only 
answer from Port 80 is a redirect to the respective https website).

 

If you need some recommendations, contact me off-list.

 

Kind regards,

Viktor

 

Von: swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] Im 
Auftrag von Andre Keller
Gesendet: Donnerstag, 10. März 2016 17:12
An: swinog@lists.swinog.ch
Betreff: [swinog] TCP timestamps

 

Dear fellow SwiNOGers,

in the last few months we had several security audits and all of them proposed 
to disable tcp timestamps. (i.e. on Linux net.ipv4.tcp_timestamps=0). AFAIK 
roundtrip time calculation in tcp relies on this and there might be 
implications for PAWS (tcp sequence number wrapping).

What do you guys think about this?


Regards
André


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Auskunft über Personendaten / deutsches Recht anwendbar?

[Viktor Steinmann]

There was another german ruling, that pornography does not fulfill the 
requirements to be protected under copyright law...


See this article (German only): 
http://www.chip.de/news/Urteil-Raubkopien-primitiver-Pornos-nicht-strafbar_62826633.html


Might be an angle to approach this case ;-)

Kind regards,
Viktor

On 23.12.2014 13:06, Q-X GmbH - Pascal Wagenhofer wrote:


Hallo SWINOGer

I hope, you’re enjoying already the holidays somewhere around.

We’re having here a little difficulties with a german lawyer. We’re 
offering shared hosting services. One of our customers is sharing 
links to uploaded.net, which contains music, which might be copyright 
protected.


The german law agency is now requesting the data of the owner which – 
apparently – we cannot provide due to restrictions of the data 
protection law of Switzerland. They’re supplying us this judgement: 
http://www.justiz.nrw.de/nrwe/olgs/koeln/j2011/6_U_87_10urteil20110325.html 
.


Question to the community:

1.What are you doing in such situations? (Yes, appart from contact 
your lawyer ;-) ).


2.Did you have similar issues and how did you handle them?

I wish you merry Christmas and a happy new year.

kind regards

Pascal Wagenhofer

Technical Services

Q-X GmbH

Schmittestrasse 5

Postfach 61

CH-8308 Illnau / Switzerland

Phone 0840 11 11 10 (International +41 840 11 11 10) (Lokaltarif)

Fax 0840 22 22 20 (International +41 840 22 22 20) (Lokaltarif)

www.Q-X.ch http://www.q-x.ch/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swiss VoIP providers

[Viktor Steinmann]

 Curious however about recommendations for VoIP providers in .ch there 
aren't that many around unfortunately. would love to hear some 
suggestions (backed by experiece).


We have a redundant SIP uplink (2 different datacenters) to 
upc-cablecom. Pricing is OK, quality is OK, support is very professional 
(no 1st-level crap, you get directly to the engineers). They use a 
separate physical connection for the VoIP link and run a VPN on that 
link between your PBX and theirs, so you're not exposed to DDoS and 
other nasty stuff from the Internet. Of course it's still a good idea to 
protect your PBX with a session border controller and a firewall... ;-)


This setup exists for 3 years now and I don't see any reason to change 
providers.


Kind regards,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cisco router configuration for a Swisscom VDSL subscriber

[Viktor Steinmann]

Is it 1960?

One of the mail positive points of a mailing list is, that others can 
profit from knowledge shared.


So if you have that knowledge, please share it here and some poor 
googling person might find the answer to this exact question in this 
very mailing-list archive at some point in the future.


Kind regards,
Viktor

Am 08.05.2014 20:07, schrieb Michael Theurl:

Hy Thomas,

Yes, we have one just call me.

michael
---
smog.at GmbH
Dammstrasse 4
A-6923 Lauterach

Tel: +43 5574 22 330
Fax: +43 5574 22 330 - 22
Email: michael.the...@smog.at

VAT: ATU67624001
Firmenbuchnummer: FN 388775 d
Handelsgericht Feldkirch

The exchange of e-mail messages is for purposes of information only
and only intended for the recipient.
This medium may not be used to exchange legal declarations.
If you are not the intended recipient, please contact us
immediately by e-mail or phone
and delete this message from your system.

On May 8, 2014, at 7:54 PM, Thomas Fritz thomas.fr...@rheintal-ix.net wrote:


Hi list!

I have to configure a Cisco router for a Swisscom Business Internet Light 
1/1000 subscription via ISDN/VDLS.
Does any of you have a example configuration, or can anyone give me the crucial 
technical specifications/protocols for the WAN side?

Thanks a lot in advance,
Thomas

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Data Centre near Bern

[Viktor Steinmann]

Since this is a smartass list in general, I'll retort:

A 100 km circle area is wrong in general, because areas are described 
in square meters or square kilometers. Your description contains a 
distance unit, and it's very logical to assume the distance from the 
center of the area, also called the arc radius. Your followup 
description of the diameter is the less logical assumption.


Travelling 50 km in 30 minutes would require 100 km/h as the median 
speed. Let's assume, that the trip starts in the city of Berne and 
getting to the highway takes 5-10 minutes depending where you start. 
Also, the speed limit on the highways around Berne is 80 to 100 km/h for 
several kilometers in each direction. So getting to a median speed of 
100 km/h for 50 km will be quite impossible.


So in my not-so-humble opinion, Andreas' joke is valid and funny.

Kind regards,
Viktor

Am 29.12.2012 01:10, schrieb Alex HM:

Hi Andreas,

I can't resist answering this one, although it is a lot of noise.

Let's assume Bern is at the center of the circle and you are within 
100 km distance from each ends, that's maximum 50 km away.
If you can't make 50 km in 30 minutes, then you've got a serious 
mobility issue.


As for serious replies, I'll look all of them one by one when I get a 
few of them.


Bests
Alex


2012/12/28 Andreas Rutishauser andr...@macandreas.ch 
mailto:andr...@macandreas.ch


Salut Alex


At 21:39 Uhr +0100 28.12.2012, Alex HM wrote:

within 100km circle area of Bern (maximum 30 minutes from Bern
by car).


you seem to be a good customer of the police then ;-)

SCNR

Andreas
-- 
MacAndreas Rutishauser, http://www.MacAndreas.ch

EDV-Dienstleistungen, Hard- und Software, Internet und Netzwerk
Beratung, Unterstuetzung und Schulung
mailto:andr...@macandreas.ch mailto:andr...@macandreas.ch,
Fon: 044 / 721 36 47




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Compaq/HP Racks

[Viktor Steinmann]

Hi all

I have some 19 racks to give away for free:

2 x Compaq rack
1 x HP rack (basically the same as the 2 Compaq racks, but with HP logo)
1 x whatever rack... but 19 (see Picture)

Pickup Location: Zug

Those racks are in perfect condition, just not used anymore. Please 
contact me off-list, if you're interested.


Pictures:

http://www.stony.com/stuff/2%20compaq%20racks.jpg

http://www.stony.com/stuff/hp%20rack.jpg

http://www.stony.com/stuff/whatever%20rack.jpg


Kind regards,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] [swinog-antispam] Calling all stations!

[Viktor Steinmann]

Dear Lukas

I guess it's not a coincidence, that you're trying to sell something to 
this list, just after the call for sponsors for SwiNOG 25 has gone out.


It's just that: Next time, please send your sponsoring application to 
swinog-core, not to the technical discussion lists.


Kind regards,
Viktor

On 23.08.2012 12:47, Lukas Meyer (TSG Codebase) wrote:

Hello everybody!

Its been a while since the last activity on this thread, it was 
holiday season. Im aware that this list is usually for admin purposes, 
nonetheless I see some importance in this topic nowadays. And we have 
something interesting to say about it. So Im taking the freedom to 
post another commercial message on this.


I been in the hosting-market for 16 yrs now, mostly as an independent 
and with pretty good projects. I saw the market go from diversivied 
into a huge consolidation with a shrinking market volume. Nowadays I 
am the head of Tecnostore Group (http://www.tecnostore-group.com), a 
small company with about a dozen nerds in .ch and .in. TSgroup is 
selling its own SaaS products at http://www.dasprivacy.com, but also 
provides infrastructure, mostly as whitelabel to companies and some 
providers. About a week ago we launched this services for the public 
at http://www.cleartier.com (Our pages arent that gr8, but come on, v 
r techies not designers)


The reason Im writing this is our cleartier architecture: We can run 
it zone-based in multiple locations. Currently we have three zones: 
One in Delhi, and two in Switzerland. Inside each zone we can put up 
small virtual datacenters for our customers (up to 50 hosts, virtual. 
Physical on Demand). This is very popular mostly with ISVs to run 
SaaS-Products. As our business is picking up speed, we are looking for 
partners, and like to present various business cases for people on 
this list.


For Hosting-Providers that are pretty small, and have other main 
revenue streams (e.g. renting Broadcast Equipment):

- Bring down your cost by moving into the ClearZones Virtual Datacenter.
- Lower the administration footprint by leaving monitoring  
management to us.

- Keep your brand and your customers by doing only first level  billing.
- With the Physical to Virtual migration techniques, you can even move 
your current setups into our virtual datacenter.
- If you want to migrate to a newer infrastructure, we can provide you 
a up-to-date technology hosting setup (Ubuntu 12.04 based).


For Line-Access Providers, Datacenter Owners and such:
- As a Line-Access provider you can provide added value to your 
customers by running a ClearZone Inhouse.
- We feature a lot of turnkey solutions and setups and we take over 
the management.
- As a datacenter owner, you can provide a ClearZone with your 
overhead hardware.
- We are looking to resell our services and some services of our 
ISV-Customers through the channels of current ISPs.


So long story short: There are a lot of business opportunities also 
for smaller providers, theres no need to make a frown guys.


You can reach us at:
- serv...@tecnostore-group.com
- 041 312 13 91 (Lukas Meyer, CEO)
- 041 312 13 92 (Peter Hethely, System Engineering)

We look forward to get in touch with you.

Regards

L. Meyer


Am 02.08.12 13:26, schrieb Xaver Aerni:

Hello,
My office is two a small ISP. We have less than 50 Hostingclinets. If 
we would have to live them we would have a problem. I think that we 
will outsource somme service in the Future like e-Mail... etc.
We have beginn with the ISP Services in Year 1996. At this time was 
the Price for a Hosting Fr. 80.-- or more. Today, you will pay for 
the same Service by a Serferfarm for Fr. 5.-- till 25.--.
In fact. You make less money. And must pay more for the 
infrastructure. I would also calculate a my work, then the loss would 
be a lot higher. At the Moment we make the money with renting 
Broadcast Equipment.  The ISP Part will financed whit this buissness.

Thats is fact. And I don't think this will be better in the future.
Greetings Xaver


*Von:* swinog-boun...@lists.swinog.ch
[mailto:swinog-boun...@lists.swinog.ch] *Im Auftrag von *chris burri
*Gesendet:* Donnerstag, 2. August 2012 03:49
*An:* swi...@swinog.ch
*Betreff:* [swinog] Calling all stations!

To whom it may concern:

Starting from zero and nowhere plus an old computer, I've spent
the last few Months since September 2011 in St. Gallen, building
a small but steady ISP operation supporting close to 30 active
customers as of right now.

At my business' core, a remarkable web of ideas. Entirely founded
on a rather ingenious prepaid-everything-everywhere philosophy,
aiming for no less than total evasion from last-mile stranglehold
and reseller slavery in particular and other, potentially
unhealthy dependencies in general while reaching far beyond
just telecommunications, into financial services 

Re: [swinog] IPv6 de-aggregation

[Viktor Steinmann]

I'm really not into IPv6, but routing Prefixes from an AS which has no 
peering or transit relationship with you has never been a good idea in 
the IPv4 world.


I'd be also interested if that's still true in the IPv6 world.

Kind regards,
Viktor

On 27.04.2012 10:09, john.coll...@bit.admin.ch wrote:


Hi SWINOG members,

we're a LIR, we got a /32 from RIPE and we want to allocate /40s and 
/48s to customers.  Only snag is that the customers will not have 
their Internet feed from us but from any Service Provider of their 
choice.  The customers will have to convince their SPs (X, Y, Z) to 
route these non X,Y,Z or foreign prefixes.  We're getting a lot of 
raised eyebrows about this.  What's this about prefixes longer that 
/32 not being propagated?   When I look at the IPv6 table I see:


IPv6 Routing Table Summary - 8625 entries

  5 local, 2 connected, 3 static, 0 RIP, 8615 BGP 0 IS-IS, 0 OSPF

  Number of prefixes:

/0: 1, /8: 1, /10: 1, /12: 1, /16: 1, /19: 2, /20: 5, /21: 3

/22: 5, /23: 5, /24: 7, /25: 4, /26: 9, /27: 10, /28: 31, /29: 19

/30: 15, /31: 13, /32: 4049, /33: 97, /34: 87, /35: 93, /36: 242, 
/37: 7


/38: 50, /39: 22, /40: 385, /41: 12, /42: 18, /43: 34, /44: 151, 
/45: 15


/46: 75, /47: 45, /48: 3006, /49: 3, /50: 1, /52: 5, /56: 9, /64: 40

/126: 1, /128: 45

So where did all the /48s come from ...  also one or two /40s...   ??

What do you think about this?  If you're a SP would you route the /48s 
or /40s from the customers?  What about your upstream peers?


Thanks in advance for your answers.

John

John Collins

Eidgenössisches Finanzdepartement EFD

Bundesamt für Informatik und Telekommunikation BIT

Basisprodukte

Telekommunikation

Netzplanung und Engineering



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Maintenance windows

[Viktor Steinmann]

Hi Matthias

This depends on your customer base. Fact is, that you'll never have a 
window where no customer is affected. However you'll have that certain 
spot in your RRDs, where the usage is the lowest. This would probably 
your preferred maintenance window.


In my recent jobs, the sweet spot was usually the night from Sunday to 
Monday at around 2:00-3:00 CET. This also has the advantage, that if 
something goes wrong, you'll be in the office after the maintenance 
anyway and can fix things.


As for the interval - it again depends on your needs. Furthermore it 
depends on the redundancy of your platform - the more redundancy, the 
less outages are caused by maintenance. The best thing is if you can 
announce a maintenance which generates no service interruption. 
Customers love that, because it shows that you keep your systems 
up-to-date (marketing!) and they don't have any impact on their services.


Cheers,
Viktor

On 19.04.2012 06:22, Matthias Hertzog wrote:

Good monrning

I'm trying to figure out the best day, time and interval for our 
maintenance window. When do you have your maintenance windows? What 
interval? How does swisscom, cablecom and the others do it?


Thanks and best wishes,
Matthias

_
mhs @ internet AG
Zürcherstrasse 204, CH - 9014 St. Gallen
Phone +41 71 274 93 93, Fax +41 71 274 93 94
http://www.mhs.ch
_


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IT Datacenter consulting

[Viktor Steinmann]

Hi Olivier

If Applied Science doesn't include building and maintenance of server 
rooms, I'd rent one. Building and maintaining a server room for just 
120m2 doesn't make sense IMHO.


Cheers,
Viktor

On 05.03.2012 13:38, Olivier Beytrison wrote:

Hello,

The University of Applied Science in Fribourg is about to build a new
building for two of our schools. We have about 120m² of space dedicated
for a server room.

The company in charge of the electrical and technical aspect of the
building is not really aware of how you build a server room and what are
its needs.

I'd like to redirect them to a company which is specialized in IT
Datacenter design, sizing and planning.

Do you know one ?

Thanks for your answers and have a nice week

/olivier





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom VDSL - TELIA - USA problem

[Viktor Steinmann]

Hi Thomas

First of all - it might be a place to ask for help, if it was a Swiss 
peering or routing problem. Given the traceroute you posted, it doesn't 
look like there's much that can be done in Switzerland.


On 2nd thought...  as VDSL customer, you're on best effort and have no 
guarantees that anything will work at all. In Forex trading (that's what 
this seems to be about), we're talking about miliseconds in which deals 
change and need to be placed - network latency is *THE* big issue for 
trading companies. They'll pay tenthousands a month just to get a 
milisecond less of latency. So if your customer is serious about Forex 
trading, he should lose this VDSL and look into some real uplink.


Good luck,
Viktor

On 03.01.2012 4:45, Thomas Mueller wrote:

Hi

a customer got problems with an application (trading tool) downloading 
from a server in the USA  (206.106.137.3). A traceroute below.


Responsetime of hop 12 (80.91.251.98) is much higher than hop 11 
(80.91.249.113) and a ping test did show lost packets on hop 12 but 
not on hop 11.


the same application runs fine with a http proxy at LayerOne (init7), 
a proxy on a hosteurope vps or on a Cablecom connection.


Is this the right place to report such a problem and aksing for help?

Thank you!

- Thomas

traceroute to 206.106.137.3 (206.106.137.3), 30 hops max, 60 byte packets
 1  192.168.14.1 (192.168.14.1) [AS8151/AS28513]  1.394 ms  1.759 ms 
1.362 ms
 2  10.136.21.195 (10.136.21.195) [AS65534]  12.432 ms  13.231 ms 
12.544 ms
 3  22-27.186-195.fws.bluewin.ch (195.186.27.22) [AS3303/AS44038] 
17.615 ms  18.040 ms  17.171 ms
 4  85-27.186-195.fws.bluewin.ch (195.186.27.85) [AS3303/AS44038] 
20.192 ms  17.757 ms  17.520 ms
 5  tge2-4.zhhia01p-rtdi01.bluewin.ch (195.186.51.5) [AS3303/AS44038] 
17.251 ms  17.302 ms  17.138 ms
 6  tge2-4.zhhia01p-rtdi01.bluewin.ch (195.186.51.5) [AS3303/AS44038] 
17.072 ms  17.700 ms  16.912 ms
 7  net1702.zhhdz09p-rtdi01.bluewin.ch (213.3.247.169) 
[AS3303/AS44038]  17.966 ms  17.929 ms  17.966 ms
 8  202-0-186-195.bluewin.ch (195.186.0.202) [AS3303/AS44038]  21.432 
ms  19.125 ms  19.938 ms
 9  i79tix-005-ae0.bb.ip-plus.net (138.187.129.7) [AS3303]  17.386 ms 
17.596 ms  21.142 ms
10  zch-b1-link.telia.net (213.248.90.237) [AS1299]  17.117 ms  17.686 
ms  17.173 ms
11  prs-bb1-link.telia.net (80.91.249.113) [AS1299]  25.882 ms  
125.402 ms  25.827 ms
12  ash-bb1-link.telia.net (80.91.251.98) [AS1299]  108.584 ms  
113.053 ms ash-bb1-link.telia.net (80.91.252.36) [AS1299]  158.407 ms
13  level3-ic-130870-ash-bb1.c.telia.net (213.248.89.178) [AS1299] 
114.600 ms  114.618 ms  124.009 ms
14  vlan80.csw3.Washington1.Level3.net (4.69.149.190) [AS3356]  
120.899 ms  120.495 ms  120.235 ms
15  ae-72-72.ebr2.Washington1.Level3.net (4.69.134.149) [AS3356] 
113.387 ms  114.457 ms ae-82-82.ebr2.Washington1.Level3.net 
(4.69.134.153) [AS3356]  120.064 ms
16  ae-3-3.ebr1.NewYork2.Level3.net (4.69.132.90) [AS3356]  112.147 ms 
112.035 ms  112.211 ms
17  ae-1-100.ebr2.NewYork2.Level3.net (4.69.135.254) [AS3356]  116.964 
ms  116.742 ms  110.879 ms
18  ae-5-5.car2.Stamford1.Level3.net (4.69.142.81) [AS3356]  116.335 
ms  123.342 ms  116.644 ms
19  INTERACTIVE.car2.Stamford1.Level3.net (4.26.50.110) [AS3356] 
122.280 ms  117.676 ms  116.042 ms
20  www.interactivebrokers.com (206.106.137.3) [AS11449]  118.604 ms 
117.565 ms  118.602 ms 22ms



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] New list for jobs

[Viktor Steinmann]

We have a SwiNOG list for anti-spam, for lawful interception and now for 
jobs...? What's next? Lists for hardware offerings, IPv6, events...?


I'm a little concerned, that we'll lose overview. Care to explain, why 
the board thinks, that this is necessary? A job offer once in a while 
doesn't hurt. SwiNOG is not a very noisy list IMHO.


Kind regards,
Viktor

On 22.08.2011 13:35, Pascal Gloor wrote:

Dear all,

As per SwiNOG Organisation board decision, a new mailing list has been 
opened, swinog-j...@lists.swinog.ch mailto:swinog-j...@swinog.ch


Topics are:

- Jobs offering
- Jobs seeking
- Discussions about the job market

At least one company, Oprandi  Partner, will be pushing SwiNOG 
relevant job offers.


SwiNOG Relevant = Networking, Programming (WebDev is here too), System 
Administration and Helpdesk (starting at 2nd level helpdesk).


Rules:

- swinog@: Jobs topics will no more be tolerated on the main list (no 
sanctions are planned for trespassers, feel free to self-regulate this 
by pointing the jobs list to the trespassers :P)

- swinog-jobs@: No archive of the list.
- swinog-jobs@: Member list is strictly private (to ensure no email 
harvesting will be done).
- swinog-jobs@: No huge postings, offers must be linked (max email 
size = 40kb)
- swinog-jobs@: accepted-languages: en, de, fr, it; prefered-language: 
en;\n\n



If you're interested in the new list (it doesn't matter if you're 
looking for a jobs or not, you might just be interested to know what's 
going on), please subscribe here:


*-- http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog-jobs --*



See you,
Pascal





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Triton Racks

[Viktor Steinmann]

Uhh... I've had bad experiences with cheap racks. Not exactly this 
brand, but nevertheless...


I've experiened...

...rack front mount rails started to bend, after putting in some 
front-only mounted equipment (such as switches)

...only 50% of all industry standard log nuts fitted into the log nut holes
...didn't know, if the electrical grounding can be trusted, so touching 
the rack was always an experiment
...after using the screwdriver once on the screws to adjust the rack, 
the screws were worn out and I had to use a power drill to get rid of them


Last but not least, you might have problems buying spare parts or more 
racks of the same type in a few years.


Just some ideas, what to check, before buying...

Kind regards,
Viktor



On 03.06.2011 09:47, Marcel Prisi wrote:

Hi Swinoggers,

We are evaluating new racks, and found these Czech ones (with stock in 
Switzerland !)

http://www.triton.cz/en/data-cabinets/free-standing-cabinets

They look as ugly as any other, but are much less pricey  Has someone had 
some experience with these ?

Thanks !



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swinog-22 Train ride

[Viktor Steinmann]

Dear all

As promised, I uploaded the video from the train ride @ SwiNOG 22. ;-)

http://www.youtube.com/watch?v=0I6My2QY87k

Kind regards,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Virtualization for Webhosters / OpenVZ

[Viktor Steinmann]

Dear Philip

While we're not a hosting provider, we still do have a lot of experience 
with virtualization platforms. We are currently running ~150 vSphere and 
Citrix XenServer servers and we've played around with Xen, KVM and others.


Two things I would like to give as advice:

- Storge is often underestimated. With virtualization you'll need a lot 
more storage throughput and access speed than with physical machines. 
NFS/NAS/iSCSI arenot a good ideas and are not a replacement for a real SAN.
- Networking and network separation is an important factor in virtual 
environments. You might keep an eye on that aspect as well.


Kind regards,
Viktor

On 04.05.2011 11:03, Philip Iezzi wrote:

Hi

As a small web hosting provider we are planning to switch from physical-only 
servers to virtualization. So far, our favorite virtualization platform is 
OpenVZ under Debian Squeeze. We might consider running Proxmox as host system 
but prefer sticking with plain Debian (even though the future of the 
OpenVZ-kernel is not guaranteed). Our main goals: hardware independency, 
reliability, maintenance (single kernel virtualization), power efficiency 
(reduce number of physical servers), cost.

We're looking for a Swiss hosting provider who is actively using such a single 
kernel virtualization technology. What's your experience with OpenVZ? How about 
resource separation of containers (VPS)? Have you got any experience running 
complete containers off a NFS-mounted NAS/SAN? How about performance in a web 
hosting environment with resource peaks on various servers?
We would greatly appreciate if anybody could share his experience with OpenVZ 
(or similar single-kernel virtualization) and get in touch with us for some 
consulting.

Thanks.
Regards, Philip

--
DATENPARK
Badenerstrasse 69, Postfach
CH-8026 Zürich

Tel +41 44 299 33 66
Fax +41 44 299 33 91
i...@datenpark.ch   www.datenpark.ch

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Anti-virus solution for Linux mail server

[Viktor Steinmann]

On 01.03.2011 5:34, Philip Iezzi wrote:

What other solutions are small hosting providers using next to ClamAV? What are 
you using?


We're using Kaspersky on Linux. The scanning engine doesn't add much to 
the CPU load and it integrates into postfix like a charm. Actually, the 
setup script does it for you, no need to edit any configuration file 
manually ;-)


As for the licensing terms, talk to a sales guy. Sometimes you can make 
marketing-deals like putting the name of the anti-virus vendor into 
mail-footers and get a kick-back on the license fee etc.. Be creative 
and you'll get a good deal.


Kind regards,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SMS from analog modem

[Viktor Steinmann]

On 10.12.2010 15:02, Stanislav Sinyagin wrote:

why not using a Siemens GSM terminal?
It has the same RS232 port and AT command set, and you don't
need a copper line (you would of course need a SIM card).
We use that one too, and it works like a charm. However it's not 
possible to operate a GSM device an every datacenter


Cheers,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP Origin ASN Validation

[Viktor Steinmann]

Wouldn't that do it?

!
route-map bar deny 10
match invalid
!

Cheers,
Viktor

On 15.11.2010 11:06, tim wrote:

Hi all,

About the talk BGP Origin ASN Validation from Roque Gagliano at SwiNOG
#21 I talked afterwards with him with the following remark:

Roque showed a route-map like this one:

route-map foo seq 10
  match invalid
  set local-preference 50
!
route-map foo seq 20
  match incomplete
  set local-preference 100
!
route-map foo seq 30
  match valid
  set local-preference 200
!

This will not fix the youtube vs. Pakistan-problem.

For example, youtube announces a /22, signed, gets local-pref 200.
Bad ISP announces a /24 out of the /22, unsigned, gets local-pref 50,
BUT gets into my routing table!

I think it whould by cool to have a system to prevent an *unsigned*
prefix, which is more specific than a *signed* prefix, to be accepted.

Maybe this could be done in IOS Code, for example with the configuration
option do not allow an unsigned more specific prefix within a signed
prefix.

This will allow us to configure the route-map as shown above and accept
invalid/incomplete prefixes.  But the accepted invalid/incomplete
prefixes are not more specific than a signed prefix.

If someone does know more, please comment.

Cheers,
 Tim



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] RANCID alternative

[Viktor Steinmann]

 Hey Stan

Great idea. One feature I've been missing in rancid for a long time is 
the possibility to have a one-stop-shop for emergency recovery. While 
the configuration is saved to CVS, the IOS and other important files 
such as vlan.dat are missing. It would be great, if this new tool 
would include a backup-function for the file-system on the 
router/switch, so that it can be fully restored after an emergency 
(including all important files).


Kind regards,
Viktor

On 11.10.2010 8:34, Stanislav Sinyagin wrote:

hi all,

I'm currently working on a new open-source project. Many of you
know the imperfections of RANCID software, and this project is made to
dramatically change this.

In README section at http://github.com/ssinyagin/gerty
you will find the short concept overview and more in-depth documentation.

At the moment the proof of concept is ready: it can store Cisco configuration
into files, as well as output of other commands, such as show isis neighbors.

It will be polished and finalized during next months, and I'll be able to
present it at a SwiNOG meeting in Spring or Summer.


your feedback will be appreciated.

cheers,
stan



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Looking for Linux System Engineer

[Viktor Steinmann]

Hallo zusammen

Wir suchen einen Linux System Engineer, der gerne auch an anderen Dingen 
rumschrauben darf, falls Interesse besteht (z.B. Router, 
SwissIX-Peerings, Switches, Firewalls, Datenbanken, Windows... you name it).


Die Person soll fliessend *DEUTSCH* sprechen und schreiben, weshalb ich 
ausnahmsweise auch mal in Deutsch auf SwiNOG schreibe.


Mehr Details hier:

http://www.jobs.ch/de/job/Informatik-Telekommunikation/Netzwerk-Spezialisten-Engineers/-Linux-System-Engineer-/Global-Supply-Chain-Finance-AG/Zug/3113292/57/1/0

Bitte offline an mich wenden, falls weitere Infos gewünscht sind.

Gruss,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Looking for Linux System Engineer

[Viktor Steinmann]

Soll natürlich off-list, nicht offline heissen ;-)

On 30.09.2010 13:33, Viktor Steinmann wrote:

Hallo zusammen

Wir suchen einen Linux System Engineer, der gerne auch an anderen Dingen
rumschrauben darf, falls Interesse besteht (z.B. Router,
SwissIX-Peerings, Switches, Firewalls, Datenbanken, Windows... you name
it).

Die Person soll fliessend *DEUTSCH* sprechen und schreiben, weshalb ich
ausnahmsweise auch mal in Deutsch auf SwiNOG schreibe.

Mehr Details hier:

http://www.jobs.ch/de/job/Informatik-Telekommunikation/Netzwerk-Spezialisten-Engineers/-Linux-System-Engineer-/Global-Supply-Chain-Finance-AG/Zug/3113292/57/1/0


Bitte offline an mich wenden, falls weitere Infos gewünscht sind.

Gruss,
Viktor


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BÜPF...again ;)

[Viktor Steinmann]

We probably all followed the discussion in Germany about the 
Bundestrojaner and how it failed.


And of course, a trojan spying on citizens is a major impact in privacy, 
which is not acceptable.


However I don't think, that it's possible to create such a trojan and 
use it, because of the following facts:


- It's not very easy to put a trojan in a system of a prudent user, who 
updates regularly and doesn't open every mail or document received.

- Virusscanners will soon know the trojan
- The swiss government doesn't have enough power to force antivirus 
software creators to ignore the trojan.

- Not all criminals use Windows ;-)

Still I'm happy, that we SwiNOGers are not the only ones worrying and/or 
fighting this project. Even if this project doesn't work, it will burn 
lots of money while trying to do so.


Kind regards,
Viktor

On 19.08.2010 22:27, Pascal Gloor wrote:

Hi SwiNOGers ;-)

I thought I'd say some words for all small and medium sized ISPs while I had 
the SDA/ATS journalist on the phone.

in German:
http://www.tagesanzeiger.ch/digital/internet/berwachungswahn-der-Beamten-in-Bern/story/12403271

in French:
http://www.romandie.com/infos/news2/201008181800060AWPCH.asp

in Italian:
http://new.ticinonews.ch/articolo.aspx?id=200533rubrica=14



See you,
Pascal


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Best Sales 2010!

[Viktor Steinmann]

IMHO the time for moderation has arrived...

On 10.08.2010 08:59, swinog@lists.swinog.ch wrote:

http://groups.yahoo.com/group/ytukovp/message




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Subliminal advertising / Spam from our domain registry switch/nic.ch

[Viktor Steinmann]

Um... after only surfing their webpage for 30 seconds I found this:

Aus den Statuten:

Die Stiftung bezweckt, die nötigen Grundlagen für den wirksamen 
Gebrauch moderner Methoden der Teleinformatik im Dienste der Lehre und 
Forschung in der Schweiz zu schaffen, zu fördern, anzubieten, sich an 
solchen zu beteiligen und sie zu erhalten. Die Stiftung verfolgt weder 
kommerzielle Zwecke noch ist sie auf die Realisierung eines Gewinnes 
ausgerichtet.

(Originalauszug aus der Stiftungsurkunde, Bern, 22. Oktober 1987)

So according to their own documents, they have no commercial interest 
(never laughed so hard).


Kind regards,
Viktor

Stanislav Sinyagin wrote:
also got a similar email this morning. 

On the SWITCH website, I couldn't find a clear not-for-profit statement. It says 


that the organization is founded by several cantons and their Universities.
I admit they could actually be a for-profit organization belonging to 
cantons -- same as cantonal banks, for example.


But we see a clear example of unfair advertising, and an obvious case for the 
anti-monopoly authorities.







- Original Message 

From: Martin Blapp m...@freebsd.org
To: swinog@lists.swinog.ch swinog@lists.swinog.ch
Sent: Mon, July 12, 2010 4:01:52 PM



I remember that switch itself made years ago some policies to  not use the
dns root .ch for advertising. And unfortunatly that's exactly  what happens
here, IMHO this mail advertises nothing else than 'switch plus'  and their 
services.



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Subliminal advertising / Spam from our domainregistryswitch/nic.ch

[Viktor Steinmann]

You might be right about that:

http://www.inside-channels.ch/frontend/insidechannels?_d=_articlesite=icnews.id=21706


Btw ... AFAIK the WEKO is currently investigating this issue.

--
Martin





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Subliminal advertising / Spam from our domain registry switch/nic.ch

[Viktor Steinmann]

I agree, that SWITCH should not have included this switchplus part in 
their info mail, as it's completely unrelated to the rest of the 
information. Also the banner on their website doesn't belong there, as 
no other entity can buy banner space there.


The best reaction might be a letter to the federal competition comission 
(WEKO), since SWITCH is obviously using its (still) good name and user 
data to push a product/a company in an unfair way.


I'm willing to sign such a letter, but I honestly wouldn't know, how to 
write one (lawyer's language...).


Kind regards,
Viktor

Martin Blapp wrote:

 Hi all,

This morning I got a mail from switch, our official swiss dns registry.

I remember that switch itself made years ago some policies to not use the
dns root .ch for advertising. And unfortunatly that's exactly what happens
here, IMHO this mail advertises nothing else than 'switch plus' and 
their services.


Unfortunatly the services from switchplus are NOT even hosted in 
switzerland,
they are reselled from germany. I've visited recently the switch 
webpage, and found
in the middle on the page a banner to switch plus. This is very 
problematic since
a lot of new people will follow this link and buy packages. All other 
swiss companies

don't have this opportunity to advertize.

Let's take another example. You all know the cantonal car-inspection 
MFK. For
me this is like the MFK would offer now car repair, car-cleaning 
services at the time
you have the car in inspection. What does an average customer then says 
to himself?
'Great, that's all from one place, from one hand, that's a deal, even if 
it is the same price
as before.' At the end, the local dealers have to close their business, 
because they

haven't the same rights the government and their institutions has.

Finally we all loose, if lot of ISPs and hosters have to close their 
doors because webhosting

and mailhosting is not able to finance the ADSL business anymore.

Switch, you have an offical mission from BAKOM, please only do what you
should do, and nothing else. Thank you !

Martin Blapp

 Sehr geehrter Herr XXX
 
 Sie erhalten diese E-Mail, weil Sie bei SWITCH einen oder mehrere
 .ch- oder .li-Domain-Namen registriert haben. Zurzeit werden Kunden von
 SWITCH seitens Dritter aufgefordert, ihren Domain-Namen von SWITCH zu
 einem anderen Anbieter zu transferieren. Dies mit der Begründung, dass
 man bei SWITCH bald keine Domain-Namen mehr registrieren könne.
 
 Um mögliche Missverständnisse und Verunsicherungen zu vermeiden,
 berichtigen wir diese Fehlinformationen wie folgt:
 
 SWITCH registriert und verwaltet die .ch-Domain-Namen im Auftrag des
 Bundesamts für Kommunikation (BAKOM). Der Vertrag zwischen SWITCH und
 dem BAKOM läuft bis zum Jahr 2015. Eine Erneuerung des Vertrags ist
 möglich. Sie sind daher bei SWITCH gut aufgehoben und brauchen nichts
 zu unternehmen.
 
 Mit der Gründung unserer Tochtergesellschaft switchplus haben wir die
 Weichen für die Zukunft - unabhängig vom Vertrag mit dem BAKOM und
 dessen Erneuerung - gestellt. switchplus bietet schon heute zusätzlich
 zur Registrierung von Domain-Namen das Hosting von E-Mail und Web an.
 
 Als unabhängige Stiftung hat SWITCH für die Schweizer Hochschulen das
 Internet in der Schweiz etabliert. Wir leisten einen wichtigen Beitrag
 zur Stabilität des Internets und bieten qualitativ hochstehende
 Dienstleistungen für Hochschulen und Dritte an.
 
 Für Fragen steht Ihnen unser Helpdesk jederzeit gerne zur Verfügung.
 
 Freundliche Grüsse
 SWITCH Internet Domains



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Probleme mit Resolving nic.ch

[Viktor Steinmann]

You might want to search for layer 2 problems such as MTU problems e.g. 
imagine Jumbo Frames on a network, where one switch/router doesn't 
support them. I once had a lng headache because of such a silly 
misconfiguration...


Cheers,
Viktor

On 06.07.2010 11:13, Klaus Ethgen wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi,

langsam zeigt das Problem seine Facetten und fängt an, haarig zu werden.

Ich habe nun weiter an dem Problem gefeilt, aber einen Namensauflösung
von nic.ch bekomme ich nicht hin.

Bisher hatte ich übersehen, daß auf einem meiner zwei betroffenen
Systeme wirklich die Firewall das Problem ist, obwohl ich hätte schwören
können, das ich dies geprüft hatte. Wie auch immer, mein zweites System,
das bei hetzner, hat keine Probleme mit fragmentierten (UDP-)Paketen.
Dort ist also dieses Problem schonmal auszuschließen. (dig +norec
+dnssec nic.ch @130.59.1.80 geht)

Wie auch immer, der verdammte bind weigert sich jedoch beharrlich, die
Zone auch nur ansatzweise aufzulösen! Witzigerweise sehe ich, wenn ich
die Auflösung über bind mache, nur jeweils ein fragmentiertes Paket im
tcpdump während ich bei dig das vollständige Paket sehe.

Bind habe ich nun auch auf eine aktuellere Version upgedated, nachdem
ich Hinweise bekommen habe, daß möglicherweise die Version 9.3 nen
Problem haben könnte. Aber auch das hat nix geholfen.

Leider kann ich keines der beiden Systeme mal so eben schnell auf nen
unstablen 2.6'er Kernel updaten um zu sehen, ob es am Kernel liegt. Aber
ich kann mir nicht vorstellen, das der Kernel 2.4 Probleme mit
Fragmentierten Paketen hätte, zumal ja die Anfragen per dig direkt oder
auch per ping mit großen Paketen durchgehen.

Wenn hier noch irgendwer eine Idee hat, mittlerweile würde ich fast
alles probieren.

Gruß
Klaus
- -- 
Klaus Ethgenhttp://www.ethgen.de/

pub  2048R/D1A4EDE5 2000-02-26 Klaus Ethgenkl...@ethgen.de
Fingerprint: D7 67 71 C4 99 A6 D4 FE  EA 40 30 57 3C 88 26 2B
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)

iQEVAwUBTDOcYJ+OKpjRpO3lAQqV9ggAnFZ+VOIV1CMorEzEL4xWe8QY4vHEUony
FkbiqcZiZaBKfKW93ZwWiUk4g48wnQvwe2i2Pka8chIoexC/mKiFbsFMwJ30/WNI
ewzXazoTlniRiVGV7tMwsw3UtnnHjnRIJHmcGdfTXOuZa4aKtsfxeb7Z1ZKUQR82
VRJMP328D3zXx+5lhi7dqxKdDsGbVI+0UA6hi3LtuFdfUD+hrhT8easkYW3BgO5c
qSpKrpXw+PhH0EBBfS7E1gqzn0W/p/DYUxUVPRv5iDCwyu/O28dbQ4yaznFswj/E
5rreMkl9WXa7u09uGcahx4Vvj83QfTmUKOxizbsfZ0aLdKUJVUmt0g==
=pGdn
-END PGP SIGNATURE-


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
   




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Wie wird eine E-Mail uebermittelt?

[Viktor Steinmann]

Despite the joy of seeing Arnold on TV (and in the last issue of c't 
b.t.w), this is probably the worst movie about how the internet/mail 
works *ever*. Actually it's so bad, that it has some entertainment 
value. Examples: Internet traffic is split into packets at the 
provider's permises, not on your host. Several packets of the same data 
stream are routed through about 5 different paths at the same time. 
Malware sits in routers or somewhere along the path of the packets and 
attacks them directly there (and the packets fight back...). Journalists 
mind-farts never looked better


SCNR
Viktor

Fabian Wenk wrote:

Hello

Somehow interesting to watch (Audio is in German) and with a known 
person starting at 08:08. :)


http://www.prosieben.ch/tv/galileo/videos/clip/23349-wie-wird-eine-email-uebermittelt-1.1703945/ 




bye
Fabian


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Geolocating IP's

[Viktor Steinmann]

Dear Stefan

One possible source of that problem could be outdated databases of a
geolocation service provider.

There are some commercial providers (e.g. ip2location.com) which offer
geolocation of IPs as a serivce. This makes sense sometimes, when e.g. a
network spans multiple regions and/or countries and you still want to know,
where a specific IP is located. Those service providers do not only rely on
the public IP databases such as RIPE, but also on other information
(probably confidential, how they exactly do it). The downside is, that they
do plausibilty checks and it might be, that it seems unplausible to them,
that a german customers has a Swiss upstream...?

Only one of a gazillion possible reasons...

Kind regards,
Viktor

 -Original Message-
 From: swinog-boun...@lists.swinog.ch 
 [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of Stefan Renner
 Sent: Dienstag, 27. April 2010 10:15
 To: swi...@swinog.ch
 Subject: [swinog] Geolocating IP's
 
 hello everybody
 
 Is anybody of you aware, how the most popular services 
 (Google, Zattoo, Facebook, etc) are matching geographic 
 locations to ip-adresses ?
 
 Our AS (41666) is located in CH, so also all the ripe objects 
 are registered with country-code CH. 
 
 Now we have a customer located in Germany, so I created a 
 inetnum-block with his subnet in ripe-db with country-code 
 DE. This was a week ago. The customer is still complaining 
 that he is constantly redirected to the swiss-versions of all 
 the services. 
 
 Does anybody of you experienced a similar problem ? Does 
 anybody knows proper solution ?
 
 Thanks for any advice in advance
 
 Best regards
 
 Stefan Renner
 
 
 Stefan Renner
 Network Engineer
 
 MYGATE
 Translumina Networks AG
 Flurstrasse 50
 CH-8048 Zürich
 
 Fon: +41 44 540 22 11
 Fax: +41 44 540 23 46
 
 stefan.ren...@mygate.net
 www.mygate.net
 
  
 
 
 ___
 swinog mailing list
 swinog@lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
 



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Functional Tests - only Nagios?

[Viktor Steinmann]

We do all our checks with Hobbit http://hobbitmon.sourceforge.net/
It has been renamed to Xymon lately, but you'll find more scripts and stuff
on the net if you google for Hobbit.

While it doesn't have a very nice interface, it scales very good and you can
so your own checks very easily.

We have scripts to monitor Oracle database replications, Updates on RedHat
packages, Coolwater flow in the Serverroom A/C and much more.

Kind regards,
Viktor

 -Original Message-
 From: swinog-boun...@lists.swinog.ch 
 [mailto:swinog-boun...@lists.swinog.ch] On Behalf Of Luca Cappiello
 Sent: Donnerstag, 28. Januar 2010 10:12
 To: swinog@lists.swinog.ch
 Subject: [swinog] Functional Tests - only Nagios?
 
 Hi Swinog,
 
 
 
 I'm curious if anybody knows a good framework/application, 
 which is used
 for functional tests in enterprise environments. Are any solutions out
 there, able to perform a operational check of all services (databases,
 remote access, running processes...) after updates, patches or changes
 of security baselines? Nagios would be probably the best choice, but
 maybe there other concepts I'm not aware of.
 
 
 
 Thanks
 
 Luca
 
 
 
 ___
 swinog mailing list
 swinog@lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
 



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Ansatz zur Umgehung der Echtzeitüberwac hung ;-)

[Viktor Steinmann]

The concept is flawed.

If I want you to get rid of all your ADSL-customers, I'll send fake
child-porn proof to the EJPD associated with your IP range. Sounds like a
business model...

Cheers,
Viktor

 Koennte man nicht ernsthaft in diese Richtung arbeiten?
 Echtzeitueberwachungen wird es, realistisch gesehen, sowieso fast
 keine geben. Wenn man mal einen Kunden im Jahr oder so fristlos
 kuendigen muss wegen einer Ueberwachung ist das auch nicht so schlimm.
 Dann soll er eben zu Bluewin gehen, dort koennen sie ihn dann beliebig
 ueberwachen :-)


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IP Management Tool

[Viktor Steinmann]

I cannot speak for all, but as for us, we want to manage ALL IPs in one tool
- even the RFC1918 IPs for internal use.

Kind regards,
Viktor 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Michael Theurl
 Sent: Donnerstag, 13. November 2008 11:43
 To: Matthias Cramer; swinog@lists.swinog.ch
 Subject: Re: [swinog] IP Management Tool
 
 why not to use the whois database from ripe ?
 
 http://www.ripe.net/db/cvs-bugzilla.html
 
 scalable, stable, and a mailinglist.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] List policy discussion (was: Check out my Facebook profile)

[Viktor Steinmann]

Hi all
 
In the last months we've seen more and more end-user questions,
vacation-bounces, off-topic and spam-like mails on the list.
 
Any suggestions how to keep the noise level low in the future?
 
Kind regards,
Viktor


  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Roman Gischig
Sent: Dienstag, 23. September 2008 18:20
To: swinog
Subject: [swinog] Check out my Facebook profile


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Notice of Copyright Infringement - How do you proceed?

[Viktor Steinmann]

As an ISP, you do...

- what a customers pays for
- what the law requires

Is either the case here? Nope. If anybody wants you to do work for them 
- and forwarding messages to people, who's IP you'll have to grep out of 
Logfiles first (in the worst case) *is* work - this entity should pay 
for it.


Cheers,
Viktor

Benoit Panizzon wrote:

Hello

I just got in contact with the swiss advocate of a company who sends us such 
messages about our users sharring copyrighted content.


I basicly wanted to tell him that he should proceed according to swiss law 
instead of bothering us with such messages.


He told me that they made very good experience with such messages as according 
to his knowledge most ISP warn their users if they hear about them sharing 
copyrighted 'goods'.
Their goal is not to sue anybody but just to show them they are not annonymous 
and hope they'll stop sharing.


So ist this true? Do most of you guys issue warning to your users if you get 
such messages?


Mit freundlichen Grüssen

Benoit Panizzon
  



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
  


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

RE: [swinog] Graphical NetFlow AS stats tool?

[Viktor Steinmann]

In my old ISP days, I used JFFNMS for this (http://www.jffnms.org/)

It was very easy to configure and besides its stupid name, that thingy was
quite useful. Time has gone by (4 years or so) and it might have become more
useful since then.

As usual, YMMV

Cheers,
Viktor

Original Message
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Manuel Kasper
Sent: Donnerstag, 31. Januar 2008 15:54
To: swinog@lists.swinog.ch
Subject: [swinog] Graphical NetFlow AS stats tool?

 Hello,
 
 does anybody on this list know of a free/open source tool
 that collects NetFlow AS aggregation records from a number of
 routers and produces traffic graphs per AS that show how much
 traffic came in from or went out to a given AS, and over
 which link (- multiple upstreams/peering links)?
 
 I'm asking because I've made something like that on a whim
 for Monzoon Networks to help with BGP traffic engineering,
 and would be happy to polish it up a bit and then release it,
 but if the solution is already out there (and better than
 what I've come up with ;), I wouldn't bother.
 
 Cheers,
 
 Manuel
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

RE: [swinog] KVM-over-IP

[Viktor Steinmann]

We use the HP solution, because it adds only one more Cat5 Cable per Server
to the racks, whereas other solutions are just a nightmare to keep your
cabling decent looking.

http://h18000.www1.hp.com/products/servers/proliantstorage/rack-options/scs/
index-kvm.html

Pricing is OK IMHO, YMMV

Cheers,
Viktor 
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

RE: [swinog] KVM-over-IP

[Viktor Steinmann]

Sorry, just found out, that they're EOL. But maybe there's one on Ebay ;-)

Cheers,
Viktor 

 http://h18000.www1.hp.com/products/servers/proliantstorage/rac
 k-options/scs/
 index-kvm.html
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom outage - details?

[Viktor Steinmann]

The Link was on http://www.heise.de. So this is some sort of 
Slashdot-Effect. In German: Die Seite wurde geheised ;-)


Cheers,
Viktor

Andre Keller wrote:

Hi Fredy

I don't believe the DDOS story. Yes, some DDOS may have occurred, but
it's not the real reason.

Is blogg.ch under DDOS at the Moment? Not reachable from GGA Maur AS...


Regards André
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom outage - details?

[Viktor Steinmann]

http://www.heise.de/security/news/foren/go.shtml?read=1msg_id=13937832forum_id=127692

Moritz Kobel wrote:

Am Thursday den 22. November 2007 schrieb Andre Keller:

  

I don't believe the DDOS story. Yes, some DDOS may have occurred, but
it's not the real reason.
  

Is blogg.ch under DDOS at the Moment? Not reachable from GGA Maur AS...




DDOS by heise.de? http://www.heise.de/newsticker/meldung/99399

Moritz


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
  


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Some well known faces ;-)

[Viktor Steinmann]

I hope this link works:

http://www.sf.tv/var/videoplayer.php?catid=schweizaktuelldocid=20071010nr=4videourl=http%3A%2F%2Freal.xobix.ch%2Framgen%2Fsfdrs%2Fvod%2Fchak%2F2007%2F10%2Fchak_20071010.rm%3Fstart%3D0%3A08%3A17.989%26amp%3Bend%3D0%3A13%3A23.211

Otherwise go to http://www.sf.tv  - SF Videos - Schweiz Aktuell 
10.10.2007 - Hemden nach Mass ;-)


I have the strange feeling, that Roger didn't receive his shirt by the 
Swiss Post... ;-)


Cheers,
Viktor
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Some well known faces...

[Viktor Steinmann]

I hope this link works:

http://www.sf.tv/var/videoplayer.php?catid=schweizaktuelldocid=20071010nr=4videourl=http%3A%2F%2Freal.xobix.ch%2Framgen%2Fsfdrs%2Fvod%2Fchak%2F2007%2F10%2Fchak_20071010.rm%3Fstart%3D0%3A08%3A17.989%26amp%3Bend%3D0%3A13%3A23.211

Otherwise to to http://www.sf.tv - SF Videos - Schweiz Aktuell 
10.10.2007 - Hemden nach Mass


Cheers,
Viktor


P.S.: Those who don't know InterXion - no need to watch the video...
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Some well known faces...

[Viktor Steinmann]

Sorry for sending this twice... the mailserver gave an error but 
obviously the mail was still delivered... and I already had deleted the 
text *grmbl*


Viktor Steinmann wrote:

I hope this link works:

http://www.sf.tv/var/videoplayer.php?catid=schweizaktuelldocid=20071010nr=4videourl=http%3A%2F%2Freal.xobix.ch%2Framgen%2Fsfdrs%2Fvod%2Fchak%2F2007%2F10%2Fchak_20071010.rm%3Fstart%3D0%3A08%3A17.989%26amp%3Bend%3D0%3A13%3A23.211 



Otherwise to to http://www.sf.tv - SF Videos - Schweiz Aktuell 
10.10.2007 - Hemden nach Mass


Cheers,
Viktor


P.S.: Those who don't know InterXion - no need to watch the video...
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
  
___

swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Candid Aeby is out of the office.

[Viktor Steinmann]

That's the reason, why I started using my private mail address for 
mailing-lists. Others use special accounts on their private domain (such 
as [EMAIL PROTECTED]). No hassle with braindead mail 
servers and equally challenged mail admins. Furthermore it's easier, if 
Christian's assumption is right (same people, different job) ;-)


I really wonder, how much lobbying must be done to a company, until they 
use Lotus Notes. I know... Notes can do absolutely everything - but 
unfortunately, nobody needs all those functions. People just want mail 
and some calendering. And that's just the two things, Notes cannot 
handle right (at least not in the default config - and that's what 
people use, because they don't spend money on a mailsystem in order to 
customize it to be useable). But I'm getting off-topic and shutting up now.


Cheers,
Viktor

Candid Aeby wrote:

What should i do?

My company is using Lotus Notes and my mail admin mentally challenged.
So what is your proposal?

  

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Eines der ersten Urteile gegen Spamer ist draussen

[Viktor Steinmann]

Well, obviously the judges didn't know, that the usual opt-out links are 
used to verify mail addresses. This should have been pointed out 
clearly. Maybe next time...


Cheers,
Viktor

Xaver Aerni wrote:


Hallo,
Der Kanton Zug hat das erste Urteil gegen das Antispamgesetz 
verkündet. Dabei stellte es sich auf den gesichtspunkt, dass ein 
Abmeldelink alleine genügt. Auf die Punkte, das der Kläger weder eine 
Einwilligung gegeben habe und auch keine Geschäftsbeziehung habe, 
wurde ignoriert


Wer interesse hat kann das Urteil selber unter 
_http://www.pop.ch/urteil.pdf_. Ich denke das gibt ein wenig 
Gesprächsstoff


Gruss Xaver

 **
Xaver Aerni
Zürichstrasse 10a
8340 Hinwil
Tel. 001 707 361 68 39



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
  


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] to SPF or not to SPF

[Viktor Steinmann]

Nowadays, every sicko can buy a .com domain for 9$ or even less. 
Spammers buy domains, put correct SPF records in their zonefiles and 
throw the domain away afterwards... (just like you did with hotmail 
accounts a few years back :-))


So IMHO DNS based spam fighting doesn't work. At least not the SPF way...

Cheers,
Viktor

Bernard Dugas wrote:

Bonjour,

Norbert Bollow wrote:

Use DomainKeys instead of SPF.  DomainKeys serves the same purpose,
but doesn't share the fundamental brokenness of SPF.


And why not using the existing authentication protocol on outgoing smtp 
server ? So the sender can use the smtp server of the provider of its 
email address from any network and SPF can work without any problem.


Did i forget anything ?

Best regards,

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] JOB: Senior Network Engineer, Schlieren/ZH

[Viktor Steinmann]

No one had the guts to write some numbers until now? Let's heat up that 
discussion a little with meat on the bone...


It depends on the location, age and company size.

In Zuerich, mid-sized company I'd say:

Age 25+ minimum 95'000 per year
Age 30+ minimum 105'000 per year
etc.

I guess it's impossible to have all those skills when younger than 25 
(please correct if I'm wrong)


As we all know, the salaries in the rest of Switzerland are a little 
lower because the living cost is also lower, so I'd say deduct some % 
for a different region in CH.


Also for smaller companies, the salaries might be lower, but the 
feel-good factor is higher, which compensates quite a lot.


Since we all know, that the current job situation for IT techies is very 
good, I'd say, that those figures are the absolute minimum and you 
should try to get more - because there will be worse years and you'll be 
stuck on the salary you negotiated in the good years...   The larger the 
company, the more you should ask, because they're the ones that will 
fire you anyway, when times get worse...


So much rants for now :-)

Cheers,
Viktor

Pascal Gloor wrote:


I'm just wondering what the community thinks, how much should one earn
in such a position with all those skills and requirements? Or, if you're
the man for this position, how much do would you expect as salary?


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Job Offer

[Viktor Steinmann]

Hi all

The company I'm working for (20 employees) is looking for an IT techie.

Here are the needs:

MUST
- Oracle experience
- Linux/Unix experience
- English language skills
- Willing to work in Zug

OPTIONAL (Bonus points)
- Networking experience with Cisco devices (BGP, switching)
- Windows server knowledge
- Scripting/programming know-how
- IDS/Firewall know-how
- VPN experience

Since the company is quite small, the IT team does everything. Imagine 
supporting an MS Office user with his Excel formulas, setting up a new 
peer at SwissIX, implementing a PHP/MySQL CMS and then mounting some 
rack equipment on the same day.


The company is in the financial sector, which means we have enough 
budget to buy cool hard- and software. But it also has some minor 
drawbacks: There are some clothing guidelines (shoes  shirt required), 
you cannot have a criminal record and you have to refrain from doing 
certain financial transactions while working here (insider trading laws).


Still interested? Send me your CV offline (remember: the reply-to goes 
to the list - be careful not to send your CV out to the world :-))


Cheers,
Viktor

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Formmailer-Scripts and Spam

[Viktor Steinmann]

About that lynx discussion...

I don't think you're losing a single customer because your websites 
don't support lynx. Usually people want to see a picture of the product 
they're buying. And then there's the aspect, of who your target-market 
is. Usually it's not the Linux-Geek (and even if it is, you're better 
off to sell stuff with images - see thinkgeek.com).


Cheers,
Viktor


Matthias Keller wrote:

Markus Wild wrote:

One that is less cumbersome than the type in the word in the weird
image approach is to set a cookie-like hidden parameter from the server
when it generates the form (I'm assuming php or perl behind a dynamic
server). In the cookie you can put the timestamp and encode the thing
using a simple cipher. When you get the cookie back, you check whether
the timestamp is within a reasonable range. The spambot would have to
refetch the original form, insert his crap and resubmit it, since it's
not able to generate the hidden parameter on its own. Most (all?) won't
do that.
  

Well, IMHO this is no better than my solution using JS
What do you do if someone has cookies disabled?
I for my part often reject cookies 'just because' when I dont feel 
they're really needed...
So I dont know which part of all surfers is bigger, those with lynx or 
those with js disabled
Actually in the last 7 day there wasn't a SINGLE lynx hitting ALL of my 
hosted domains...


But of course this is always a matter of opinion and it can vary a lot 
depending on the website.
But IMHO if a user using lynx cant add an entry to a guestbook this is 
no big loss for me...


Just my 2c

Matt
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Out-of-Office Policies?

[Viktor Steinmann]

Hi Matthias et al

Out-of-Office notifications are not just nonsense as you state in your 
mail. In a very service-oriented business, where the person-to-person 
relationship is important, it makes sense for the customer to know, that 
his personal contact is not available.


Please Remember: Technology should be here to help people solve their 
problems, not the other way around. So instead of focusing on how to 
stop OoO, why not try to find a technically clean way for OoO.


People need it, so let's give it to them, but in a proper way.

Now for the technical part:

- We all agree OoO should not be sent to Mailinglists. This can usually 
be achieved by checking for precedence bulk and not replying to those.


- OoO should not reply to Spam. Difficult to do, because it's hard to 
separate spam from ham automated, as we all know.


- OoO should only be sent once per mail address (default with FreeBSD 
vacation, also possible with sieve scripts)


- OoO should be clearly recognizable as such by automated mail handlers. 
Maybe a standard already exists? Probably not. This could be a way to a 
solution (maybe a new X- Header Field, so recipients can filter out OoO 
it not needed)


- OoO should be clearly recognizable by humans

And finally to your questions:

1. Yes
2. No reply to Spam, Only 1 reply per Mail-Address
3. No
4. No special handling

Cheers,
Viktor

Matthias Leisi wrote:

Hi there,

I'm trying to gather arguments to stop the Out-of-Office notification 
nonsense. I know the technical arguments against OoO and other forms of 
auto-responders, but I'm interested to learn how different organisations 
are handling it.


If you don't want to answer publicly, please respond to me directly 
([EMAIL PROTECTED] - remember that the Swinog list overrides my 
Reply-To: header). I will respect any requests for anonymous handling, 
but I will send a summary to the list.


You may also answer in verbose form instead of using the questionnaire 
below :)


My questions:

0. What kind of organisation are you answering for (eg for your ISP 
staff, for your ISP customers, for your company users etc.)? About how 
many users do you handle?


1. Does your organisation allow OoO to external recipients?

If you answer no to question 1, no further questions required :) If you 
answer yes, please continue below:


2. Do you have any restrictions as to when/how OoO notifications are sent?
 [ ] No restriction
 _or_
 [ ] No OoO to detected spam
 [ ] OoO only to senders in the user's address book
 [ ] Only to senders with matching SPF/DKIM/Sender-Id etc
 [ ] Other restriction:

3. Have you had any DNSBL listings due to OoO notifications?
   If yes, which DNSBLs?

4. How do you send out OoO notifications?
 [ ] No special handling
 [ ] Over a dedicated IP address

Thanks a lot for your contribution,
-- Matthias
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] I think we must change to france

[Viktor Steinmann]

At least that would finally enable Bluewin-TV ;-)))

SCNR
Viktor

Xaver Aerni wrote:
/Presence-pc at reports that France Telecom just announced they are 
//offering 2.5 Gb/s internet connection/ 
http://www.presence-pc.com/actualite/ftth-experience-18331// to select 
cities in the Paris region. For... $85(70 Euros) a month you also get 
free phone and TV. From the article (in French): The historical 
operator opted for a GPON (Gigabit Passive Optical Network) FTTH 
architecture (Fiber To The Home). This technology allows up to 2.5 
Gbits/s download and 1.2 Gigabits/s upload./





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Reset DSCP/IP-PREC field

[Viktor Steinmann]

It's not only allowed but recommended ;-)

Cheers,
Viktor

Marcel Leuenberger wrote:

HiYa!

Just want to ask you if it is allowed to reset the IP-PRECEDENCE/DSCP-Field to
Zero (or any other value) at the border of an ISP network? 


Means there is no problem if an IP-Transit provider reset the customers
IP-PREC/DSCP field because INTERNET is best effort and therefore each ISP can do
with the IP-PREC/DSCP whatever he want's because each ISP has it's own
QoS-Domain and rules?

For me resetting the IP-PREC/DSCP is a must concerning security and to declare
Internet-Traffic as BE in internal networks.

Or I am wrong and are there any existing rules in the ISP community relating
modifying IP-PREC/DSCP?

Are you resetting the IP-PREC/DSCP as well?

Thanks and greetings,
- Marcel

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Rules for used hardware selling

[Viktor Steinmann]

I agree with Steven.

Just one addition: The hardware should be in Switzerland. We don't want 
to pay a fortune for shipping, duty and taxes.


Cheers,
Viktor

Steven Glogger wrote:

i personally think that if you're not a professional hardware dealer who
wants to use swinog as a new market opportunity blablabal.. but you're
working for an IT company/ISP/whatever who has some spare hardware/get rid
of some.. well, then let's go.
professional cisco dealers etc should shut up here.. ,-)

-steven


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Marc Eggenberger
Sent: Sunday, May 21, 2006 7:43 PM
To: swinog@swinog.ch
Subject: [swinog] Rules for used hardware selling


Dear list.

How are the current rules for selling hardware? As far as I remember its
ok if I only sell a few used pieces. I dont do this as a business of
course. Just found a couple of stuff during my last move ;-)

Thanks for any comments.

Regards,

Marc

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Datacenters

[Viktor Steinmann]

Hello all

We're looking for some space (somewhere between 1-3 racks) in a 
datacenter in the Zurich area.


It should offer at least the following features:

- UPS and Diesel generator to operate during longer power outages
- Security such as the possibilty to get a separate cage for our racks
- Security in terms of video surveillance and/or security guards
- 24x7 access
- More than 1 carrier present (best: carrier-neutral)

We've already got one particular datacenter, that we like: Interxion. If 
you know a datacenter, which can compete with them, please contact me 
off-list.


Cheers,
Viktor

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cisco parts for sale..

[Viktor Steinmann]

sorry for this kind of spam..


You know that it's spam and you still do it?

Sorry, but you're a moron.

(I said sorry, so it doesn't matter)

Let's ban this guy and get back to busines...
Thanks,
Viktor

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cablecom blockages out of control?

[Viktor Steinmann]

No offense, but did you ever call the helpdesk of your company? I had 
the joy to

do so, and I'd rather have sex with a cheese grater, than calling that number
again.

Cheers,
Viktor

Zitat von Marc Ammann [EMAIL PROTECTED]:


There are some ways you can go, to get in touch with a company
[1] via your Helpdesk



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom Fixnet wants to pay CHF 15 Mio for Cybernet

[Viktor Steinmann]

Well, Fredy

Looks like you'll have to generate a huge loss, before you can sell Init7 ;-)

I can help spending some useless money, if you want...

Cheers,
Viktor

Zitat von Fredy Kuenzler [EMAIL PROTECTED]:


It's somewhat OT here (not technical), but I guess a general interest:

Swisscom Fixnet wants to pay CHF 15 Mio for Cybernet:
http://www.blogg.ch/index.php?/archives/234-Swisscom-Fixnet-will-CHF-15-Mio.-fuer-stark-defizitaere-Cybernet-zahlen.html

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: AW: [swinog] couple of sunrise dsl outages

[Viktor Steinmann]

Well - don't know, how many of your read the jobs.ch jobmail, but if
you do, you
have probably noticed, that sunrise is looking for experienced network
engineers for a long time now...  I guess, they don't have a technical, but a
HR problem  ;-)

Too bad, their offices are in the totally wrong place (from my point of view
(which is of course the middle of nowhere (Säuliamt)))

Cheers,
Viktor

Zitat von Xaver Aerni [EMAIL PROTECTED]:


Sunrise has sayed, one of the two Routers are completly down... I'm
wondering that sunrise only has two routers in Switzerland. One in Zürich...
it was today down... and one in Lausanne...
I think Sunrise has a big problem with the rednunance of their system
Only two  Possiblety and if one is down, they couldent route all the traffic
to the other router...



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] swiss jurisprudence regarding spam

[Viktor Steinmann]

Uh... maybe that's true for the players. Try to buy a Region-1 DVD in CH...

(yes, I know that Amazon.com etc. are shipping from the US, but that's not the
point)

Cheers,
Viktor

Zitat von Attila Kinali [EMAIL PROTECTED]:


The regio protection is already declared illegal in Switzerland.
Or why do you think you can here to buy a region-free
dvd player while you cannot in Germany ?



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] FW: Blocking request of a homepage

[Viktor Steinmann]

As you might or might not know, most ISPs are strongly agains blocking websites
and will only do so, if ordered by court. AFAIK it only happened once until
now, by a judge in Vaud (we all remember the trouble this caused).

The problem with blocking pages is, that it doesn't work and/or scale. If you
take the domain out of the DNS, the customer can simply use another DNS server.
If you want to block it on some sort of Firewall/Filterlist, you have to
administer that by hand, which ISPs generally don't like to do.

So my guess is, that nobody blocks that site. When it comes to SMTP, that's a
different story...

Cheers,
Viktor

Zitat von Ladu, Daniele [EMAIL PROTECTED]:

 Perhaps this message didn't arrive to the list, i try it one more time
 
 -Original Message-
 From: Ladu, Daniele 
 Sent: Donnerstag, 14. Juli 2005 08:50
 To: 'swinog@swinog.ch'
 Subject: Blocking request of a homepage
 Importance: High
 
 
 Hello dear SWINOG members
 
 I have a friend, that has a Club Music related Newsletter with over 15000
 Email Adresses with double opt in and out.
 On the 12. July a little ISP has sent a request to hostpoint, regarding my
 friend and his spaming activity.
 
 The ISP told Hostpoint, that www.housestation.ch was blocked by some ISPs. As
 i know, sunrise has never blocked
 the Homepage of housestation. I think that the complaint from the ISP is a
 private hate against my friend.
 
 Therefore i wanna ask, if you can tell me if you (ISP) are blocking this
 Homepage, and if yes, how can we find
 out what the reason of the blocking is.
 
 Also we have complained at Hostpoint regarding the forward of the complaint
 without having the related Mailheader
 of the Spammail sent by my friend. The other thing is, that the Spammail in
 question was sent out on May. But my friend
 has sent out the Newsletter trough hostpoint the first time on the beginning
 of june.
 
 Thanks you for your help and feedbacks.
 
 Sincerly,
 
 
 Daniele Ladu
 Senior Technical Support Operator
 
 Sunrise
 TDC Switzerland AG
 Abuse Team
 Thurgauerstrasse 60
 8050 Zürich 
 Tel.  +41  1 300 53 61
 Fax   +41  58 777 97 07
 Mail  [EMAIL PROTECTED]
 Mail  [EMAIL PROTECTED]
 Internet  www.sunrise.ch
   

***
 This email and any files transmitted with it are confidential and intended
 solely for the use of the individual or entity to whom they are addressed.
 If you have received this email in error please notify it to the sender.
 
 Cet email ainsi que tous les fichiers qui lui sont attaches sont
 confidentiels
 et reserves a l'usage exclusif des personnes auxquelles ils sont adresses.
 Si vous avez recu cet email par erreur, veuillez avoir l'obligeance
 d'en informer son emetteur.
 
 Dieses email sowie alle damit verbundenen Dateien sind vertraulich und nur
 fuer diejenigen Personen bestimmt, an die es adressiert ist.
 Wenn Sie dieses email irrtuemlicherweise erhalten haben, bitten wir Sie,
 den Absender zu informieren.

***
 
 ___
 swinog mailing list
 swinog@lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
 




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog