Re: [swinog] SafeHost AS21217 accused to leak routes for two hours to China Telecom AS4134 - anyone from SafeHost to comment?

[Will van Gulik]

Hi Fredy and list,

Interesting one, I'm not aware that SafeHost's noc is around on the
list. Also, from what I see Safehost doesn't peer anywhere, so that
looks more like route manipulaiton , like someone injecting a route that
looks that it's from AS21217 . Or worse, overly fat fingers or routing
optimization tools.

We have something to look at during our rainy long week end ;)

Will

On Sun, Jun 09, 2019 at 07:22:52AM -0400, Fredy Kuenzler wrote:
> https://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traffic-through-china-telecom/
> 
> --
> Fredy Kuenzler
> Init7 (Switzerland) Ltd.
> Technoparkstrasse 5
> CH-8406 Winterthur
> Switzerland
> 
> http://www.init7.net/
> 

> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] New BÜPF / VÜPF: Technical, Organisational and Administrative Requirements, March 1, 2019

[Will van Gulik]

Well, wasn't what Alexander & Nils said during their talk ( 
https://www.youtube.com/watch?v=WrCW2p3ne0U ) ? 

In summary : " opt-out, and you won't have anything to do " ?

At least that was my understanding, but I might be missing some specifics as I 
didn't read all the legal papers.

Cheers, 

Will

> On 21 Jan 2019, at 20:30, Fredy Kuenzler  wrote:
> 
> Did anyone notice and read the new BÜPF / VÜPF Technical, Organisational
> and Administrative Requirements, valid from March 1, 2019?
> 
> To my understanding FDAs with reduced requirements don't have to do
> anything.
> 
> Press release in DE/FR/IT
> 
> DE
> https://www.admin.ch/gov/de/start/dokumentation/medienmitteilungen.msg-id-73716.html
> 
> FR
> https://www.admin.ch/gov/fr/accueil/documentation/communiques.msg-id-73716.html
> 
> IT
> https://www.admin.ch/gov/it/pagina-iniziale/documentazione/comunicati-stampa.msg-id-73716.html
> 
> -- 
> Fredy Kuenzler
> Init7 (Switzerland) Ltd.
> AS13030
> Technoparkstrasse 5
> CH-8406 Winterthur
> Twitter: @init7 / @kuenzler
> http://www.init7.net/
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swinog #34 Ride on 30th - Geneva and Lausanne

[Will van Gulik]

Hey Swinogers,

FYI I will be taking the train at 6:42 from GVA, in 2nd class. If anyone wanna 
join me, I'll try to take some space for those stepping in in Lausanne.

Cheers and see you all tomorrow ! :)

Will

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Will van Gulik]

Hi Fredy, Everyone,

I realised my previous reply was sent encrypted, sorry about the noise. Here is 
the clear content :

Taking back on a wider point of view again, I think temporary and 
localised/more specific BGP announcements isn't a so bad idea, but I'm the 
awful example and I can reach most the contents in .ch thru the peering 
location around my network.

That's also valid for the content I host, or almost because I'm not yet at the 
point where I can tweak my announcements to all the bigger players in .ch, for 
instance to that very cooperative cable operator, because they still won't peer 
with these tiny networks. So I'm already out of that pack of users.

And further more, I also heard that the transit is becoming cheaper than 
peering, with some LIR/ISP getting it from, let's say HE and Cogent, even if 
they are based in .ch. I see this becoming a blocking point, if we don't remind 
the local LIR/ISP that for user experience, we should try to keep traffic 
local, if possible.

Maybe we should ask the big hosting location in .ch to get free x-connects for 
the peering ports ?

Will

> On 01 Oct 2016, at 22:15, Jeroen Massar  wrote:
> 
> On 2016-10-01 20:24, Patrick Albrecht wrote:
>> Hi
>> 
>> I'm a employee of a good known E-Commerce site here in switzerland and I
>> would like to share some thoughts from my side if that's okay for all. I
>> hope I understood well enough what you plan. Otherwise just ignore what
>> I just wrote :)
>>> Given that e-commerce such as digitec.ch is assumingly making 99.9% of
>>> the revenue within Switzerland, their prefix doesn't need to reachable
>>> from all over the world.
>> 
>> That's correct, the /customer/ doesn't need to the reach the website
>> from outsite switzerland normaly. But there're many 3rd-Party Provider
>> for Newsletter, Monitoring etc. and distributors that need to be able to
>> resolve digitec.ch outside of switzerland for example.
> 
> "resolve" implies DNS.
> 
> Peering is about BGP.
> 
>> (because there server are not located in switzerland) Mostly it's 
>> dispensable if they
>> can't reach the website or a ftp server for some minutes, but if they
>> can't access the page for days the E-Commerce Site will have issue with
>> orders, product availability, newsletter shipping etc. Also some
>> 3rd-Party Scripts may use a dns lookup and would fail then.
> 
> You need to see that 'limited announce of prefix' would only happen in
> the case of a DDoS, this, so that local sites / direct peers can reach
> it, but it is 'dead' over transit, thus cutting off most DDoS traffic
> that comes from strange countries (not .ch).
> 
> As for those external companies, if you are worried about them failing:
> peer directly with them, setup a VPN or: move your stuff more local
> where you have control.
> 
> Also, do realize that providing Swiss customer data to a foreign entity
> might break various privacy regulations do ask your legal team and
> of course inform your customers.
> 
>> There's also
>> a possibilty that the employee reach the internet via a proxy outside
>> of switzerland (due to a enterprise policy) so they wouldn't be able
>> to access there site and couldn't work at all.
> 
> That is a weird "Enterprise policy". Doing business that way opens you
> up to all kind of fun international laws concerning your business.
> 
> Also note that you can of course always announce to trusted peers that
> are not in Switzerland...
> 
> The major point is "trusted peers". Ones that will clean up their
> attacking hosts the moment you notify them.
> 
>> Of course if the site isn't available at all it's not a good experience
>> for the customer and they may order there article on a other onlineshop,
>> but if the website is online and doesn't work properly that's also not a
>> optimal solution either.
> 
> Better test it out today what happens when your site gets DDoSsed to
> bits, as the script kiddies have access to the same botnet know that
> Krebs got sent after him... (see other mail).
> 
>> Addiontally to the fact that more and more E-Commerce Websites use
>> DDoS-Protection services like akamai or cloudflare, only about half
>> hosting there website on server in switzerland.
> 
> You might want to reconsider your hosting location ;)
> 
> Also, if you are paying those kind of companies: prepare to dig deep in
> your pockets for DDoS protection... we are going to have a fun X-mas
> this year...
> 
> Greets,
> Jeroen
> 
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Will van Gulik]

> On 02 Oct 2016, at 09:53, Jeroen Massar  wrote:
> 
> On 2016-10-02 05:27, Rabbi Rob Thomas wrote:
>> Dear team,
>> 
>>> Since we see >1Tbps DDOS attacs in the wild, I suppose
>>> out-of-the-box DDOS mitigation suppliers have lost this race. There
>>> is no operator in Switzerland which can handle 1Tbps DDOS attacks.
>> 
>>> When we saw DDOS against digitec.ch and others earlier this year, I
>>> was a bit surprised that none of the so called "experts" proposed
>>> regional BGP propagation as a remedy.
>> 
>> May I offer up UTRS as a model or perhaps part of your solution?
>> 
>> 
> 
> Good one.
> 
> Lets see if the SwiNOG #30 PC gives a slot for this discussion, then
> we'll include it in the slidedeck and conversation.
> 
> Unless somebody from TC is hopping over, I'll use the details on:
> https://www.cymru.com/jtk/misc/utrs.html
> as input. Pointing out that TC is of course the one who runs UTRS :)
> 

I actually already submitted a talk about that topic (not exactly on 1Tbps 
DDoS), and UTRS is already there. But with this thread I see me extending my 
content with our new information ;)

> Greets,
> Jeroen
> 

Cheers,

Will

> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Will van Gulik]

binNDFG1Id5cb.bin
Description: PGP/MIME Versions Identification


encrypted.asc
Description: OpenPGP encrypted message

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Ripe Probes @SwiNOG-28 (6th may 2015)

[Will van Gulik]

Hi Swinogers,

Like at last Swinog, I'll have a small amount of Atlas probe with me.

Here is the link to the project, that most of you know and which is
really useful for the community : https://atlas.ripe.net/

I would like to give away probes for ASNs who doesn't have one yet,
because I think there are many in most of the usual Swiss eyeballs networks.

If you have any questions, just follow the link above, contact me, or
ping me at Swinog. It's easy to spot me, I (also) speak French.

And if you know you want/need one, just reply me with your ASN and I'll
put one aside for you.

See you all on the mountain ! :)

Will van Gulik
Atlas Ambassador,
IP-Max SA - AS25091

 Forwarded Message 
Subject:[swinog] Reminder SwiNOG-28 (6th may 2015)
Date:   Sun, 26 Apr 2015 15:37:02 -0400
From:   Roman Hochuli 
To: swi...@swinog.ch 



Hello Everybody

I'd like to reminde you SwiNOG meeting (#28) is happening on May 6th
2015. The event will be held at the Gurtenpark in Berne.

Registration is open. The agenda is available on the meeting
website.

Meeting website:
http://www.swinog.ch/meetings/swinog28/index.asp

Meeting registration:
https://register.swinog.ch/

We hope to see you *all* at SwiNOG-28!

Have a nice week,

Roman Hochuli
on behalf of the whole SwiNOG Core-Team


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SwiNOG-27 (22th october 2014) (Ripe Atlas Probe)

[Will van Gulik]

Hi Swinogers,

Be aware that I'll have some Ripe Atlas Probes ( https://atlas.ripe.net/
) with me. I'd be glad to give some to the ASN that don't have one on
their network yet.

I'll be easy to find, I speak French and I peer much.

Cheers !

Will van Gulik
Ripe Atlas Ambassador
IP-Max SA - AS25091

On 10/2/14 9:39 AM, Roman Hochuli wrote:
> Dear all
>
> We posted the agenda of the upcoming SwiNOG-27 on the website. Have a
> look here: http://www.swinog.ch/meetings/swinog27/agenda.asp
>
> You can still register for SwiNOG-27! Details are available her:
>
> --> http://www.swinog.ch/meetings/swinog27/index.asp <--
>
> See you all in Bern.
>



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] swinog.ch and SwiNOG meeting

[Will van Gulik]

Mehmet,

He is, but not anymore in the board of Swinog, if I recall correctly ;)

Will
(aka peering guy @AS25091)

On 11/27/13 10:55 PM, Mehmet Akcin wrote:
> Is Pascal still alive ? Would be my question :-)
>
> Mehmet
>
>> On Nov 27, 2013, at 13:50, Tobias Brunner  wrote:
>>
>> Hi everyone,
>>
>> Does anyone know what happened to the website www.swinog.ch? It just serves 
>> a "Default Parallels Plesk Panel Page".
>> Looking back at past meeting dates on archive.org it would have been time 
>> for another meeting at around November, but I think there was nothing 
>> announced. I'm wondering when the next meeting would take place?
>>
>> Cheers and good night,
>> Tobias
>>
>>
>>
>>



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Presentation from last SWNOG meeting

[Will van Gulik]

Hi everyone,

I Just noticed that the presentations (most of them) of the #24 were 
finally online.


Thanks for that ! :)

Will

On 7/6/12 10:52 AM, Roman Hochuli wrote:

Hello All


I am looking for the presentation from last meeting. It seams that they
are not available at the usual place. Any change here or "work in progress"?

It's the later... Sorry for the delay. Will get back to you when we
sorted it out.

Regards
Roman


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IPv6 Buddy Keypad

[Will van Gulik]

Hmm, we even got something older :

http://www.faqs.org/patents/app/20080267683

On 3/30/12 7:35 PM, Scott Weeks wrote:


--- opperm...@networx.ch wrote:
From: Andre Oppermann

This special USB IPv6 number keypad doesn't seem to be a joke:
   http://www.ipv6buddy.com

Even includes dedicated ":" and "::" buttons.

Somebody should buy a 10-pack and sell them at next Swinog meeting. ;-)
---


It's weird, but it's not a joke.  The guys over at AusNOG were checking it out 
a while back:

http://lists.ausnog.net/pipermail/ausnog/2012-January/011962.html

scott


--
--



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Looking for a Lab Switch

[Will van Gulik]

Hi Tobias,

FYI Ricardo or ebay is full of Cisco 2924 / 2950 / 3548 for really 
reasonable prices.
So if you don't find any in the community (which I doubt you wont in the 
ch_de part), keep this possibility in mind.
You would probably also find some in ch_fr part, however the travel and 
the beer makes the auction idea back in front ;) .


Good luck with your search,

Will

On 2/7/12 8:21 PM, Tobias Brunner wrote:

Hi everyone

I'm looking for a cheap cli managed 24 port (or more) cisco/nortel/hp/avaya/brocade 
switch (not a "linksys" or other home-hardware) for my home lab to try things 
out. If someone has an offer or knows where to get one, please contact me off-list.

Thanks to everyone

Cheers,
Tobias






___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Extraction fees

[Will van Gulik]

Hi Pim,

First, I'm thinking that 16 hours and 2 (other) guys for 3 servers and 
some network devices looks a bit heavy.


Maybe that's what they are counting for the time spent for those two guys.

My point of view is that if they act like that after a long work period, 
it might be a place/company to avoid.


However if you don't have pending bills, I don't see why they are 
charging you for extraction, that's really non sense.


Will

On 11/13/11 11:19 PM, Pim van Pelt wrote:

Hi NOG!

An ISP that I have had a ~4y relationship with has recently terminated
the hosting for a small number of servers (3x 1U machine and a switch
and a console server). For a while they were not able to return my
equipment to me, but now they have sent me a friendly letter asking me
to pay a significant sum of money (to the tune of 4000 CHF) extraction
fee, and that I must accompany two engineers on-site for about 16
hours to safely remove the equipment. Is it common for swiss companies
to terminate agreements and then send an invoice for returning the
property?

Feel free to drop me a note off-list.




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Selling Used DL380G4

[Will van Gulik]

Heya Swinogers,

This is not directly related to networking, but behind those nice 
routers and switches of yours, some people may have servers connected 
there, a guy told me.


So, as mentioned in my subject, I got some old servers here that I'm 
trying to sell :


I've got about 10 DL380G4 with drives, single or dual CPU, from 2.8 to 
3.4 Ghz,  2 to 6 Gb of ram. I also have a pair of DL360 G4. Drives are 
SCSI320, I don't think I've got anything higher than 76Gb there.


My idea would be to sell the lot in one shot, however I'm open to any 
suggestions.
Obviously, I'm trying not to throw them out, as they have been running 
in clean environment since their first startup, they could be useful. A 
good compromise if you need a server with a full set of spare parts ;)


Current location of those machines is Geneva.

Anyway, just contact me off-list for any questions.

And if not, see you guys at next Swinog,

Will


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Efficient ADSL2 Bridges nowdays

[Will van Gulik]

 Jeroen, as I'm doing my v6 on a router behind the bridge, I really 
don't care about what feature as the bridge, beside bridging ;)


Roger, I'm quite fan of pcengines already, however they don't do the 
interconnection with the incombent (isp) supporting *dsl interaction. 
I'm really interested on the device at the front of it.


W.

On 2/1/11 8:23 PM, Roger Blum wrote:

Hi Will

On 01.02.2011, at 16:44, Jeroen Massar wrote:

On 2011-02-01 15:29, Will van Gulik wrote:

Heya people,

Currently maintaining many customers network offices with ADSLs
connections, generaly bridging the router on site and doing all my
routing on a *nix box.

In this design, I'm looking for some efficient, low price, reliable
hardware that would do only the bridge work.

The Netopia VDSL[1] thingies that Swisscom gives along with the VDSL
offer works like a charm over here. I just disabled the wireless on it
(as I could not manage it and hey, that is not the way to do it) and put
it into bridge mode and indeed have a Linux box behind it for IPv4 NAT
and IPv6 tunneling, nice clean 1480 path to the PoP ;)

Otherwise you might want to look at the new AVM 7570 box, that one can
even do IPv6 (with some quirks like no static routing yet but it does
work ;) even supports TIC+heartbeat.

For that matter, just cut down the list to everything that does support
IPv6 and skip the rest as that is then not a good investment.

[1] http://www.netopia.com/equipment/products/miavo/index.html

I can recommend hardware from PC Engines [2] on where you can run different 
operating systems on a CompactFlash card. There are also a few naked os 
(Debian, CentOS) images or prepared router/firewall images linked on the site, 
such as m0n0wall [3] or pfSense [4].

[2] http://www.pcengines.ch/
[3] http://m0n0.ch/wall/
[4] http://www.pfsense.org/

Cheers,
Roger




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Efficient ADSL2 Bridges nowdays

[Will van Gulik]

 Heya people,

Currently maintaining many customers network offices with ADSLs 
connections, generaly bridging the router on site and doing all my 
routing on a *nix box.


In this design, I'm looking for some efficient, low price, reliable 
hardware that would do only the bridge work.


I've used various hardware those days, like zyxel, linksys, even tried 
tp-link.


Does anyone have any insight about that ?

Thanks !

Will - PorCus



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Vorratsdatenspeicherung

[Will van Gulik]

Sorry again about the " I'm not so easy on german related stuff ", but I 
guess this topic is related to the data retention thing issued some time 
ago. If so, it would be great to share this in english also, if you 
don't mind. I guess some non-german speaking people would also be 
interested on sharing on that topic.

Thanks to those who already did so, sorry for being so late on that 
topic to ask some condensed translation on the topic.

Regards.

(A non-so-fluent-on-german-reader)

Xaver Aerni wrote:
>
> Hallo zusammen,
> Das Bakom hat in dem letzten Monat ein Büchlein als Gerichtsurkunde 
> verschickt, betreffend der Voratsdatenspeicherung. Was die Geräte 
> können müssen etc.
>
> Meinse wissens gibt es bis jetzt nur eine Lösung die einigermassen 
> "Abnehmbar" ist. Das ist das von Nokia Siemens... Und das erfüllt auch 
> nicht in allen Punkten die Vorschriften.
>
> Die Vorschrift ist ja eigentlich für die Katze. Und die Provider 
> müssen für diese Lösung viel Geld in die Hand nehmen. Für 3 Monate 
> sämtlichen Verkehr aufzuzeichnen. Braucht je nach Providergrösse sehr 
> grosse Kapazitäten.
>
> Mich nimmt es Wunder was im Moment bei den diversen Provider geplant 
> ist. Eigentlich müsste der Aufwand für das Aufzeichnen auf die Kunden 
> abgewälzt werden. Das heisst ein DSL Anschluss würde im Schnitt etwa 
> Fr. 10.-- bis Fr. 20.-- im Monat teurer werden.
>
> Die Auf die Abgaben die der Bund für eine Auskunft zahlen würde. 
> (Betrag steht ja nicht fest) kann man ja nicht rechnen.
>
> Gruss Xaver
>
>  **
> Xaver Aerni
> Zürichstrasse 10a
> 8340 Hinwil
> Tel. 001 707 361 68 39
>
> 
>
>
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
>   

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] OT: network connection 500 - 1000m

[Will van Gulik]

You could try to get a pair of sdsl modems/router, pull a 1km line 
between the sites, and hope noone touch it.

You can get some copper cable at elektro material for instance, for a 
quite low price.

As I don't know how you are flexible on this site, this idea may be 
stupid, and the wireless w/repeater idea may be more clever.

My 2 Cents.

Will

Stanislav Sinyagin wrote:
> You may place a wireless repeater to some high enough point where both 
> locations are visible...
>
>
>
>
>
> - Original Message 
>   
>> From: Daniel Kamm 
>> 
>
>   
>> I have an off-topic network problem, but some ppl here might help me. I 
>> need to build an IP network line from the middle of a construction site 
>> to an internet connection place for a one-time event. The distance is 
>> around 500 - 1000m. No line of sight and therefore directed WLAN will 
>> not work without several relays.
>>
>> At the moment I'm thinking of using a copper line and some old fashioned 
>> 1MBit lease line modems. Do you have other ideas of getting this to work 
>> or may have any parts which you can lend?
>>
>> The event will happen at the end of July on a single week day. Thank you 
>> for your help.
>> 
>
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
>
>   

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Time to Exclude Bad ISPs

[Will van Gulik]

However, as one the problem is the end-user out there, that's also 
something quite hard to deal with. We have not been able to " fix " 
every user, and I guess we won't be able to do that.

So affecting where we can isn't that bad, even if it's not the best way 
to do it.

Will

Peter Keel wrote:
> And whereas the CNC-infrastructure of a botnet is clearly the easiest point 
> to attack, 
> it won't really destroy the botnet, it only will make the botnet-herders 
> loose control
> over their botnet. The real problem lies elsewhere, not in ISP-space. 
>
> Cheers
> Seegras
>   
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] trillian & IRC

[Will van Gulik]

I guess my best advice would be to use something else than trillian, as 
irssi for *nix system ... I'm not too aware anymore of what still exists 
on  w32, I'd say mirc or xchat are still around ...


Good luck ;)

[EMAIL PROTECTED] wrote:

Hi,

Anybody using trillian for irc? I've been having problems recently and 
therefore I haven't been in the swinog channel for a while ...


Any hints and tips are therefore very welcome ;-)

Cheers
Robert
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: AW: [swinog] Happy Sysadminday!

[Will van Gulik]

Hmmm I guess Sysadmins does speak english right ?

Any way :

Joyeux jour des sysadmins, vous êtes tous beau.

:)

Reto Burkhalter wrote:

Habe ein schönes "Danke, liebe Admins" Banner erhalten.. ich hätte
mit mehr Bestechung gerechnet :)
Gruss

-Ursprüngliche Nachricht-
*Von:* Michele Capobianco [mailto:[EMAIL PROTECTED]
*Gesendet:* Freitag, 27. Juli 2007 11:31
*An:* 'swinog@lists.swinog.ch'
*Betreff:* [swinog] Happy Sysadminday!

Alle jahre wieder….

Na?

Was habt ihr für geschenke bekommen?

http://www.sysadminday.ch

Gruss aus Wil

Michele



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
  

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Mail Server suggestions

[Will van Gulik]

Too bad *nix is not that easy for you, one of my recent setup seems to 
match this, using postfix, dovecot, amavisd-new, clamav, postgrey and 
horde as webmail.


Anyway before that, I used to have a mailenable ( 
http://www.mailenable.com ) the free version worked fine, and the 
pro-full-enterprise-commercial-insertsomethingcatchyhere looks good.


But not tweakable enough when your starting to be ok with *nix systems ;)

But as I remember, Windows and Mailservers don't like each other so 
much. I used to have Atrium's mailserver and even some Exchange (blame 
me), and from some size, it's not just possible to keep decent 
performance and/or good stability.


Maybe it's time to get a *nix guy I your team ? ;)

Good luck.

Mike Kellenberger wrote:

We're looking around for a new mail server solution, since our mercur
(www.atrium.de) server is just too unstable.

Preferably it should run on windows (we're just not at home on the *nix
platforms), have all it's config options in a sql database, provide
anti-spam and anti-virus out of the box, have a feature-rich webmail
client and be tailored for a small ISP.

Our specs: ~700 Domains, ~4000 Users

Thanks in advance for all your tips!

Cheers,

Mike



--
--
[   Will van Gulik ]
[  [EMAIL PROTECTED]]
[ http://www.porcus.ch ]
begin:vcard
fn:Will van Gulik - PorCus
n:van Gulik ;Will
email;internet:[EMAIL PROTECTED]
x-mozilla-html:FALSE
version:2.1
end:vcard

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: AW: WG: [swinog] de-peering

[Will van Gulik]

This sounds really interessting, but what about an English version, or 
worse, a french one ?


Please, well all know that communicating is not as simple as we'd liked 
it to be, (read : packet loss, version problems, flapping, [use any 
silly/true reason here]), but *trying* to make it readable to anyone 
else is quite a nice bonus.


Did we won that one ? ;)

Xaver Aerni wrote:

Hallo Peter,

Die meisten CC Modems ist das Webinterface gesperrt.

Deshalb ist es nicht möglich.
Laut den Spezifikationen war der Upstream auf 27 MHZ. Bei unseren Messungen
sind die auf 23 MHZ gewesen.
Die Frage ist nur wieso... Man sagt ja das von 15 - 20 MHZ die Störungen
sehr gross sind (auf den Kabelnetz) und wenn die Mittelfrequenz bei 23 MHZ
ist (8 MHZ Bandbreite) kommen die recht in diesen bereich runter.

Gruss Xaver 


-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] Im Auftrag von Peter Baumann

Gesendet: Freitag, 15. Dezember 2006 17:24
An: swinog@swinog.ch
Betreff: Re: WG: [swinog] de-peering

Xaver Aerni schrieb:
Hab mal eine ernste Frage betreffend Cablecom und ihren dauernden 
Störungen…


Ist es möglich dass die CC ihre Upsteamfrequenz von 27 MHZ 
auf 23 MHZ 
gewechselt hat? Das würde die Störungen dauernden Störungen 

erklären.

Gruss Xaver


Hi Xaver

Meistens kann man auf dem Cablemodem Webinterface die 
Up-/Downstream Frequenzen und HF-Pegel anschauen.
Versuch mal mit dem Browser auf http://192.168.100.1 zu 
connecten, dort gibts ev. je nach Modell eine Diag-Seite.


Ev. hilft auch das folgende Tool um die Abfrage via SNMP zu machen:
http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/

Gruss

Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



--
--
[   Will van Gulik ]
[  [EMAIL PROTECTED]]
[ http://www.porcus.ch ]
begin:vcard
fn:Will van Gulik - PorCus
n:van Gulik ;Will
email;internet:[EMAIL PROTECTED]
x-mozilla-html:FALSE
version:2.1
end:vcard

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] JOB: Senior Network Engineer, Schlieren/ZH

[Will van Gulik]

Jeroen Massar wrote:

ahem... that's a long list...



Pascal, that is what most people call "Over qualified" :)

Nevertheless, how much you get paid doesn't really matter, it's about
how much fun you have. The funding helps a lot in the equation, but if
you get paid loads and you are not having any fun then what's the use of
having loads of fun and having to spend all that money to actually have fun?

Greets,
 Jeroen
I Quite agree on that one. But I guess almost everyone around here works 
because there is a fun part in its work.
Another fact is that if the salary is correct, it may be considered as 
the magic bonus if the work is cool ;)


Ok I may be put into the weird guys list, but some of you guys already 
know that ...


--
--
[   Will van Gulik ]
[  [EMAIL PROTECTED]]
[ http://www.porcus.ch ]

begin:vcard
fn:Will van Gulik - PorCus
n:van Gulik ;Will
email;internet:[EMAIL PROTECTED]
x-mozilla-html:FALSE
version:2.1
end:vcard

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SDSL

[Will van Gulik]

Woups,

I didn't knew that. Well the worst problem, if you had a bug with your 
2.3+ Mb equipement, would be that you won't get any support of Swisscom 
on your copper pair if you ask then for ...


Right ?


Andre Oppermann wrote:

Nik Hug wrote:


By the way, I'd be curious if there are other products that can 
achieve that performance on a copper pair ...


there are a lot of others

zhone (former: paradyne and nettonet)
actelis


Unfortunatly everything doing more than 2.3Mbit/s per copper pair
is currently not allowed by Swisscom spectrum management.

begin:vcard
fn:Will van Gulik - PorCus
n:van Gulik ;Will
email;internet:[EMAIL PROTECTED]
x-mozilla-html:FALSE
version:2.1
end:vcard

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SDSL

[Will van Gulik]

Depending on the distance you have between the two points, you can use 
some sdsl modems that are supposed  to reach 4 or 5 mb. Over 2 pairs you 
can reach 9 mb ...


I Guess Tahoe have some that does that, don't know about the others ...

By the way, I'd be curious if there are other products that can achieve 
that performance on a copper pair ...


Anyone ?

Regards.

Will

Lukas Beeler wrote:

* Xaver Aerni <[EMAIL PROTECTED]>:
  

   I'm working on a Projekt we are needing a Line for ca 3 Mbit. Is it
   possible to multiplex 2 SDSL Lines to a 3 Mbit Line... that we have
   3.6 Mbits

   We don't use Internet Connect we must only connect two Points.



That's easily possible, if you have both end points under your
controller. You will need a device which is capable of "mixing"
the datastream.

Depending on your budget and application, you can use two Linux
or *BSD based machines with some SDSL Bridges (e.G. ZyXEL), or
you can buy a router appliance equipped with two SDSL cards and 
the appropiate licenses.


If you need the latter, talk with the presales support of your
distributor, they can tell you which products can fulfill your
needs.

If you are on a limited budget, you might try the first variant.
This needs more technical expertise, though.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


  
begin:vcard
fn:Will van Gulik - PorCus
n:van Gulik ;Will
email;internet:[EMAIL PROTECTED]
x-mozilla-html:FALSE
version:2.1
end:vcard

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Re: OT: blogging

[Will van Gulik]

Hi,

I'll just throw my " frenchy " point of view.

I like that blog & news ideas quite much, I spend throwing links on irc 
(ok not #swinog) all day long anyway


But the problem that keeps me away from those, I guess, interessting 
news, is that they are in german. And sorry about that, but I'm still 
not able to read that language correctly.


So what about pasting something (on irc why not) worldwide readable ? ;)

PS : That may also be why I'm not on #swinog anymore, btw ... :)

Peter Baumann wrote:

Please go on with your Blogg.ch, it's always very interesting and
informative!

OK, the posting of the URLS into this mailing list is maybe not the
right choice... maybe in IRC?

How are the others thinking?



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog