[swinog] T-Mobile US can not reach us any idea? contact?

2013-10-18 Diskussionsfäden Marco Fretz
Hi everyone, I know there is possibly no one around here from T-Mobile US. Maybe someone has a contact to T-Mobile US that can possibly have a look into this? I've tried some official e-mail address from whois information months ago but no response. We are AS198288 and our prefix 5.34.248.0/21

Re: [swinog] Pro / Contra Backup MX?

2012-08-31 Diskussionsfäden Marco Fretz
Hi, (did not read the whole thread here, so sorry for might saying things already said before) Backup MX is a good thing and a good service to offer for business customers (even there are many different definitions of business customer in the ISP world :)) with their own mail server. Problem, as

Re: [swinog] Facebook down

2012-03-09 Diskussionsfäden Marco Fretz
On Mar 8, 2012, at 4:49 PM, Peter Keel wrote: * on the Wed, Mar 07, 2012 at 05:37:06PM +0100, Marco Fretz wrote: Customer told me that there was a known bug in Plesk. Maybe there really was a botnet attack against Facebook today :) does anyone have any specific information? would

Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Marco Fretz
looks like its back up: dig A www.facebook.com ; DiG 9.8.1-RedHat-9.8.1-1.fc15 A www.facebook.com ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 3178 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION:

[swinog] Facebook down

2012-03-06 Diskussionsfäden Marco Fretz
Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm not sure but looks like the error exists since about 07:15 today. on facebookdown.com were a lot of reports from around the world, now this site is

Re: [swinog] Facebook down

2012-03-06 Diskussionsfäden Marco Fretz
... Add this to your host file: 2620:0:1c18:0:face:b00c:0:2 www.facebook.com Regards, Vincent Marco Fretz marco.fr...@gmail.com a écrit : Good morning everyone, Does anyone have an idea what happened to Facebook DNS servers? A www.facebook.com DNS queries are not answered anymore. I'm

Re: [swinog] aside from my economical warfare problems: a simple, python pexpect based cisco config archiver to SVN (not using SFTP but the CLI).

2012-02-06 Diskussionsfäden Marco Fretz
On Jan 11, 2012, at 3:55 PM, Philippe Strauss wrote: yuk must be difficult to get one single dime from a cisco config archiver :-) more seriously, I prefer a 4 pages code I can comprehend and bend at my taste. I totally agree. I'm using my own scripts (mostly shell scripts) for config

[swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring

2012-02-03 Diskussionsfäden Marco Fretz
Hi SwiNOGers, I started searching the web for a good solution on this task years ago. There was and is as far I can tell no actual SNMP MIB for monitoring IPv6 BGP and OSPFv3. The only thing that could be a solution is this already expired IETF draft

Re: [swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring

2012-02-03 Diskussionsfäden Marco Fretz
the whole network monitored and graphed by snmp. Marco On Fri, Feb 3, 2012 at 10:01 AM, Jeroen Massar jer...@unfix.org wrote: On 2012-02-03 09:29 , Marco Fretz wrote: Hi SwiNOGers, I started searching the web for a good solution on this task years ago. There was and is as far I can tell no actual

Re: [swinog] IPv6 BGP unicast peers / OSPFv3 neighbors SNMP monitoring

2012-02-03 Diskussionsfäden Marco Fretz
welcome a few more ideas and examples of how other ISPs do that... Thanks have a nice weekend Marco From: Marco Fretz marco.fr...@gmail.com To: swinog@lists.swinog.ch Sent: Friday, February 3, 2012 2:58 PM Subject: Re: [swinog] IPv6 BGP unicast peers / OSPFv3

Re: [swinog] Suche Cisco 7206VRX

2011-12-15 Diskussionsfäden Marco Fretz
Hallo zusammen, Danke für die zahlreichen Angebote. Wir haben nun einen Router gekauft. Falls wir noch mehr brauchen, melde ich mich dann gerne nochmals. Schöne Feiertage, Gruss Marco 2011/12/12 Marco Fretz marco.fr...@gmail.com: Hallo zusammen, Ich bin auf der Suche nach einem günstigen

[swinog] Suche Cisco 7206VRX

2011-12-12 Diskussionsfäden Marco Fretz
Hallo zusammen, Ich bin auf der Suche nach einem günstigen, gebrauchten Cisco 7206VXR mit NPE-G1 oder G2 oder einem ähnlichen Router, brauche einfach 2-3 x 1GE und 0.5-1GB RAM. Falls jemand was rumliegen hat und loswerden will, macht mir doch bitte kurz ein Angebot. Abholung Ostschweiz,

[swinog] kyberna AG is hiring a IT-System-Engineer Network / Datacenter

2011-07-03 Diskussionsfäden Marco Fretz
Hi, kyberna AG is hiring a IT-System-Engineer Network Datacenter (m/w), Office in Vaduz, Liechtenstein. http://www.kyberna.com/no_cache/kyberna-allgemein/aktuelles/aktuelles-single-ansicht/article/165/1.html (German only) regards Marco ___ swinog

Re: [swinog] Anti-virus solution for Linux mail server

2011-05-06 Diskussionsfäden Marco Fretz
Hi, Another thing to defend incoming viruses is to use greylising (what you should do anyway :-)). Greylisting catches mostly every virus mail sent out of bot nets (that's where viruses usually come from). We're using amavisd-new as pre-queue filter with spamassassin and clamAV. we didn't get any

Re: [swinog] Port 25 Blockade @ Swisscom (Bluewin)

2010-04-14 Diskussionsfäden Marco Fretz
Hi SwiNOG subscribers, Hi Swisscom, As written in SMTP RFCs a mailserver sending to a mailserver should use port 25 and a client sending to a mailserver (submitting a composed message) should use submission port 587. So far the approach in general is a good one, but just the approach, the

Re: [swinog] Port 25 Blockade @ Swisscom (Bluewin)

2010-04-14 Diskussionsfäden Marco Fretz
Hi SwiNOG subscribers, Hi Swisscom, As written in SMTP RFCs a mailserver sending to a mailserver should use port 25 and a client sending to a mailserver (submitting a composed message) should use submission port 587. So far the approach in general is a good one, but just the approach, the

[swinog] SHDSL / ADSL DSLAM

2009-08-31 Diskussionsfäden Marco Fretz
recommend the G.SHDSL.bis or should we stay with G.SHDSL (4096 per line)? Thanks and best regards Marco Fretz ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Looking for an old Dial-In Router

2008-11-27 Diskussionsfäden Marco Fretz
Hi SwiNOGers, We need an old Cisco router for dial-in access to serve 2-5 users. I want to use BRI not a PRI interface. 2 lines are enough for these max. 5 customers. solution should serve ISDN and modem users as well. I don't have much experience with dail-in access routers. Any suggestions

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)

2008-10-21 Diskussionsfäden Marco Fretz
Tonnerre Lombard wrote: Salut, Marco, On Mon, 20 Oct 2008 14:15:41 +0200, Marco Fretz wrote: What I'm trying to say is: As a mail service provider (recipient side) you can use greylisting and if there are some buggy mailers out there in the internet (or in your local network) it's

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)

2008-10-20 Diskussionsfäden Marco Fretz
my opinion is very radical but I think it's the way it should be. Of course I know there are exceptions with individual customer situations, etc. bests Marco Tonnerre Lombard wrote: Salut, Marco, On Fri, 17 Oct 2008 15:21:59 +0200, Marco Fretz wrote: Of course I know what you mean. That's

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)

2008-10-17 Diskussionsfäden Marco Fretz
Tonnerre Lombard wrote: Salut, Marco, On Thu, 16 Oct 2008 15:22:39 +0200, Marco wrote: fully agreed. thats a bad argument against greylisting. if php scripts or other webserver stuff, like newsletter servers, etc.. use their own MTA which is most likely a fancy carp script, as you said,

Re: [swinog] RBL's (again) (Was: Anyone from Green here?)

2008-10-17 Diskussionsfäden Marco Fretz
Michael Naef wrote: On Wednesday 15 October 2008, Tonnerre Lombard wrote: [..] Not very problematic for the mail server but of course the PHP script does _not_ attempt redelivery. And your users go to gmail, because there they get the mail. Not sure that's desirable for you. This whole

Re: [swinog] open source illusions

2008-10-08 Diskussionsfäden Marco Fretz
Tonnerre Lombard wrote: Salut, Per, On Tue, 07 Oct 2008 15:41:47 +0200, Per Jessen wrote: I am 99% an open source _user_, and I have only written very few patches. Which proves my point, I think. So let me summarize. The fact that we all can fix things and only a few people do it means

Re: [swinog] IRC Server dead ?

2008-10-08 Diskussionsfäden Marco Fretz
7 Oct 2008 um 9:32 hat Marco Fretz geschrieben: [EMAIL PROTECTED] wrote: IRC is cool - IRC is a geek tool ,-)) skype is something for warmduscher (well, i've got an account since 2 days...) ,-)) yes, IRC is old-school. it's just great, coding own bots, irc clients, etc... lot

Re: [swinog] IRC Server dead ?

2008-10-08 Diskussionsfäden Marco Fretz
Database Engine error '80040e57' The field is too small to accept the amount of data you attempted to add. Try inserting or pasting less data. /warmduscher_melden.asp, line 125 haha :D Roger Am 7 Oct 2008 um 9:32 hat Marco Fretz geschrieben: [EMAIL PROTECTED] wrote: IRC is cool - IRC

Re: [swinog] IRC Server dead ?

2008-10-07 Diskussionsfäden Marco Fretz
Boris Meyer wrote: no one cares about security and I think swinog should care about security! use IRC, install one of the thousands IRC clients available and ask your security guru to open the port, or do it on your own ^^ You can connect via SSL for a little bit of enhanced security

Re: [swinog] primary / backup BGP multi homed issue

2008-09-04 Diskussionsfäden Marco Fretz
Johannes Resch wrote: On Thu, September 4, 2008 09:52, Marco Fretz wrote: Sunrise changed their as-communities recently so that's no longer possible for our backup provider to influence their local-pref. Where did you get this information from ? Sunrise definitely supports customer

Re: [swinog] Content delivery system like Akamai?

2008-09-03 Diskussionsfäden Marco Fretz
Scott Weeks wrote: There're a lot of players in that space. I used to work for a company called Digital Island that bought Sandpiper to get their Footprint CDN. This was then sold to CW who then sold it to blah, blah and it finally ended up at Savvis. There were several lawsuits with

Re: [swinog] Content delivery system like Akamai?

2008-09-02 Diskussionsfäden Marco Fretz
Jeroen Massar wrote: Marco Fretz wrote: [..] ... but maybe I'm just crazy and you might simply ignore this post :-) Most people know *how* to do it (fail-over anycast presto), the economics, deploying it worldwide and getting a good solid customer base factor are other factors though

Re: [swinog] Content delivery system like Akamai?

2008-09-02 Diskussionsfäden Marco Fretz
Stanislav Sinyagin wrote: Guys, are you intending to build a service, or just want to play around? A service would involve hardware investment, SLA, on-call support staff, sales personnel, and tons of other investment - are you willing to start that today? I just want to know if and how

Re: [swinog] Content delivery system like Akamai?

2008-09-02 Diskussionsfäden Marco Fretz
Claudio Jeker wrote: Corrected, your wrong. TCP works just fine for short living TCP sessions (like 99% of all traffic). If you're routing is stable you always end up at the same site. Only on bgp route changes that influence the path to the anycast network you may get session drops because

Re: [swinog] Content delivery system like Akamai?

2008-09-02 Diskussionsfäden Marco Fretz
Jeroen Massar wrote: [..] Ok, thank you Jeroen and Claudio for this explanations about anycasting. But is there anyone using anycasts for HTTP content? I think its only used for DNS, etc... am I wrong? Wrong. google(anycast http) google(anycast) google(distributed content system) etc etc

[swinog] Securing Cisco Routers in a ISP network (management-plane?)

2008-07-31 Diskussionsfäden Marco Fretz
Hi everyone, I'm preparing my routers for IPv6. Along with v6 support comes the requirement to secure router management / services for v6. Currently I've inbound access-lists on all inbound interfaces blocking management traffic (ssh, telnet, ftp, http, etc.) and things like SIP, etc. to all

Re: [swinog] This is what Linus Torvalds calls OpenBSD crowd ...

2008-07-21 Diskussionsfäden Marco Fretz
I think it's not worth the discussion in the openbsd list aswell. BSD (OpenBSD) and Linux are way different, different strategies and goals... But its just amusing to read. Marco julien mabillard wrote: Well, I don't know if this needs a comment. Coding is my preferred way to provide best

Re: [swinog] Switzerlandwide Internet problem

2008-06-06 Diskussionsfäden Marco Fretz
hi, we're not experiencing anything like that here... Do you have any additional information about the problem? Marco Michele Capobianco wrote: Hey all A friend just told me that Cybernet told him there is a Switzerlandwide Internet Problem. Does anybody know something? Cheers

Re: [swinog] massive udp attacks from 67.228.4.81

2008-06-02 Diskussionsfäden Marco Fretz
to this port as well - although the rate is much lower than at your site (about 20'000/min). CU Tobias On May 30, 2008, at 6:20 PM, Marco Fretz wrote: Hi everybody, is there anyone else expecting massive UDP (mostly port 53) traffic from 67.228.4.81? Destinations are (possibly random

[swinog] IPv6 for all of our customer webhosting?

2008-05-30 Diskussionsfäden Marco Fretz
Hi SwiNOGers, as you know im trying to get ipv6 connectivity for our backbone and hosting stuff. Know i got the following question: is it wise to add a v6 host record for all domains pointing to the webhostings? www.blah.li.IN A 88.82.97.x www.blah.li.IN 2a02:380:::x its not a

Re: [swinog] Sixy.ch: directory of IPv6 enabled web sites

2008-05-30 Diskussionsfäden Marco Fretz
i think its possible. just do an lookup. this can also be done if the user has no ipv6 connectivity... and Manuel has the skills and time to code such a little plug-in, right? :D [EMAIL PROTECTED] wrote: Hi all can you write a firefox plugin which shows a link for each ipv4 website if

[swinog] massive udp attacks from 67.228.4.81

2008-05-30 Diskussionsfäden Marco Fretz
Hi everybody, is there anyone else expecting massive UDP (mostly port 53) traffic from 67.228.4.81? Destinations are (possibly random chosen) ip address out of our AS3915. see attached netflow graph. We've now blocked the ip address and got over 3.7 million blocks within 10 minutes. I just

[swinog] Anyone here using ZyXEL SHDSL DSLAMs?

2008-04-28 Diskussionsfäden Marco Fretz
Hi, Is here anyone who uses the SHDSL / SHDSL.bis technology? ZyXEL IES1000 - IES5000 DSLAM chasis and SLC1216 - SLC1248-22 line cards? We have a few problems with lineprobing / rate adaption and crc errors. Or does anyone know a good paper about Signal-to-Noise Margin lineprobing / rate

Re: [swinog] chzrh01 opens - first Swiss based SixXS PoP

2008-03-25 Diskussionsfäden Marco Fretz
hi any ideas why i cant find this PoP in the tunnel request form at the SixXS admin tool? does the pop support ayiya mode? is it free? greets marco Jeroen Massar wrote: Hi folks, I would just like to spam here also that, with thanks to the nice folks from IP-Man, we have setup and now

Re: [swinog] bluewin ADSL ... everything okay?

2008-03-12 Diskussionsfäden Marco Fretz
hi can anyone post some affected ip addresses or urls please? use traceroutes instead of ping, so u can see routing problems or changes. u may use ip-plus (bluewin / swisscom) looking glass services to test out off bluewin's AS http://www.ip-plus.ch/tools/looking_glass_servers.en.html regards