[swinog] Re: Sicherheit von SS7 - mit Schweiz-Bezug

[Fredy Kuenzler via swinog]

Inside-IT did an interview with Andreas Fink (German). He considers himself as the scapegoat for the large security issue SS7 has, and that many mobile operators don't give enough attention to necessary security measures.https://www.inside-it.ch/der-basler-mit-dem-globalen-spionageservice-20230609--Fredy KünzlerInit7 (Switzerland) Ltd.Technoparkstrasse 5CH-8406 Winterthurhttps://www.init7.net/Am 11.05.2023 um 10:18 schrieb Fredy Kuenzler :A similar article has been published by several newspapers of the TX group (german, paywall).Please note that Andreas Fink is a long term and valued member of our SwiNOG community and probably the person with the most SS7 knowledge. I suppose he is subscribed to this mailing list.Weltweite Angriffe auf Telecominfrastruktur – Schweizer ETH-Ingenieur beliefert die Spionage-Industrietagesanzeiger.ch--Fredy KünzlerInit7 (Switzerland) Ltd.Technoparkstrasse 5CH-8406 Winterthurhttps://www.init7.net/Am 11.05.2023 um 09:56 schrieb Matthias Leisi via swinog :

(Resend von der richtigen Absender-Adresse)https://www.haaretz.com/israel-news/security-aviation/2023-05-10/ty-article-magazine/.premium/global-surveillance-the-secretive-swiss-dealer-enabling-israeli-spy-firms/0188-0005-dc7e-a3fe-22cdf290The Secretive Swiss Dealer Enabling Israeli Spy Firms(…)It leads from the Americas to Africa to South-East Asia, but also to Basel, a mediaeval town on the banks of the Rhine and the unassuming home of Andreas Fink, a Swiss telecom expert whose unusual skills have placed him at the centre of this industry.(…)reveal how Fink's systems have served as a conduit for probing and attacking phone networks across the globe(…)When contacted by this investigation, Fink admitted to working with companies and “legally entitled government agencies” as a provider of surveillance services.(…)Fink's request to Robert was for "SS7 access" and "a bunch of global titles". In other words, he wanted a list of phone numbers, belonging to Robert's phone company, which could be used to send queries to other networks in other countries. (…)-- Matthias LeisiKatzenrütistrasse 68, 8153 RümlangMobile +41 79 377 04 43matth...@leisi.net___swinog mailing list -- swinog@lists.swinog.chTo unsubscribe send an email to swinog-le...@lists.swinog.ch___
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-le...@lists.swinog.ch

[swinog] Re: Sudden RTT drops after changing fiber OTO plug

[Fredy Kuenzler via swinog]

You sure that the change didn‘t happen from plug 2 to 1?!

Plug 2 is (mostly) using Swisscom‘s BBCS infrastructure, while plug 1 belongs 
to ewz and is used by other service providers (Disclaimer #1: this applies only 
to Zurich, other locations may differ; Disclaimer #2: Init7 is using both plug 
1 and 2 in Zurich for Fiber7, but not BBCS).

The latency drop could explain if your connection is no longer on BBCS, as it 
usually adds about 5 to 10ms.

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/

> Am 29.11.2022 um 12:49 schrieb Fabian Wenk via swinog 
> :
> 
> Hello Mat
> 
>> On 29.11.2022 10:41, Mat Kowalski via swinog wrote:
>> For interested, here are 3 graphs presenting the drop. For every graph the 
>> left side is OTO#1 and the right is OTO#2. Monday morning was the time of 
>> changing the line:
>> 1) https://i.ibb.co/qRL1Hyb/1.png 
> 
> I do have a connection on OTO Plug 1 in Zürich, even with the EWZ provided 
> Fiber/Ethernet bridge (4 Ethernet-Ports), with one port used for a line to 
> Cyberlink (1 Gbit/s).
> External physical systems within Switzerland are mostly 2 - 2.5 ms with IPv4, 
> IPv6 sometimes slightly more.
> The DNS at 8.8.8.8 / 2001:4860:4860:: has 1.8 ms.
> And the VM I have at ungleich.ch, has 4.7 ms (IPv4), and 5.2 ms (IPv6).
> 
> Almost a decade ago I had a MC2-based (copper) line with 10 Mbit/s from 
> Cyberlink and I do remember that for systems within Switzerland it was also 
> at ~3 ms.
> I also have a Sunrise/UPC Cable connection with IPv4 only, there the latency 
> is ~21.5 ms and 25.4 ms (for the VM). But during the night (since around end 
> of August) it is significantly higher, sometimes even above 50 ms. This is 
> not the first time and it usually does improve again after a few month, e.g. 
> when they split the cable segment into smaller areas.
> 
> So for me it seems that your ISP probably has the most influence for the 
> latency of your line with their infrastructure and transit behind.
> 
> 
> Best regards,
> Fabian
> ___
> swinog mailing list -- swinog@lists.swinog.ch
> To unsubscribe send an email to swinog-le...@lists.swinog.ch
___
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-le...@lists.swinog.ch

[swinog] Re: 15% IPv6 drop in Switzerland

[Fredy Kuenzler]

I don‘t think the measurements are correct. Either false values or false 
calculations.

For us Init7 AS13030 they assume only 15% IPv6 adoption.

The reality: We provide native IPv6 to *all* broadband customers by default. I 
believe that only a handful (less than 100) legacy customers on the ewz Zürinet 
infrastructure don‘t get IPv6, which are not yet migrated to our own hardware.

«Wer misst, misst Mist.» (works only in German, sorry).

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/

> Am 10.04.2022 um 14:50 schrieb Jeroen Massar :
> 
> 
> 
>> On 10 Apr 2022, at 14:26, Nico Schottelius  
>> wrote:
>> 
>> 
>> Salut everyone,
>> 
>> on this sunny Sunday, is anyone else wondering why we had a drop of
>> about 15% points from 2021 to 2022 of detected IPv6 usage
> 
> No, as it is sunny go enjoy the good weather :)
> 
> But as you bring it up...
> 
>> I am referring to https://stats.labs.apnic.net/ipv6/CH which shows it
>> quite impressive.
>> 
>> Is this due to UPC/Sunrise merger? It seems lise AS6730 "lost" a lot of
>> IPv6 traffic since end of May 2021:
> 
> There are per-AS stats, and Swisscom (which is the majority of samples) has a 
> graph that is equal to the drop:
> 
> https://stats.labs.apnic.net/ipv6/AS3303?c=CH=1=1=30=1
> 
> but indeed, the decline is also in 6730:
> 
> https://stats.labs.apnic.net/ipv6/AS6730?c=CH=1=1=30=1
> 
> 
> while 6830 actually gained a wee bit:
> 
> https://stats.labs.apnic.net/ipv6/AS6830?c=CH=1=1=30=1
> 
> 
> but even 15600 has a bit of a dip that is similar-ish:
> https://stats.labs.apnic.net/ipv6/AS15600?c=CH=1=1=30=1
> 
> 
> 
> Please note that the methodology of the test is based on ads, thus if 
> somebody starts blocking ads, or otherwise breaks the path for those ads, 
> then the test will fail.
> 
> Also note that if some browser OS accidentally breaks/de-prefers IPv6 in some 
> way, these numbers go down too, the advertising agencies are in control.
> 
> France has a similar dip:
> https://stats.labs.apnic.net/ipv6/FR
> 
> Greets,
> Jeroen
> 
> (Funny to realize that 6730 and 6830 will merge at one point, just 100 ASNs 
> diff)
> 
> ___
> swinog mailing list -- swinog@lists.swinog.ch
> To unsubscribe send an email to swinog-le...@lists.swinog.ch
___
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-le...@lists.swinog.ch

[swinog] OVH datacenter SBG2 in Strasbourg on fire 

[Fredy Kuenzler]

Very sad day for our colleagues at OVH AS16276 as they lost their datacenter 
SBG-2 in Strasbourg completly („everything is destroyed“) in a fire  and the 
neighboring SBG1/SBG3/SBG4 at least temporary.

https://www.dna.fr/amp/faits-divers-justice/2021/03/10/strasbourg-important-incendie-dans-une-entreprise-situee-sur-un-site-seveso-au-port-du-rhin

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Fwd: AW: FDV Technische Vorschriften Netzqualität

[Fredy Kuenzler]

Lying to the customer is seldom sustainable. To setup some sort of «QoS» to 
fake the results would be detected sooner or later and will end up in negative 
press.

While I agree with your proposal of the automated test scenarios I think it‘s 
rather an illusion to achieve it.

Note that BAKOM refuses to discuss the topic with the SWINOG community despite 
the accumulated expertise (where else then here?) which I think is wrong.

At least we should try to achieve a fair and unspoiled setup unlike in Germany. 
My proposal is a point to start the discussion.

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/

> Am 12.06.2020 um 23:51 schrieb Jeroen Massar :
> 
>> On 2020-06-12 20:16, Fredy Künzler wrote:
>> Dear all,
>> Please see below my communication with BAKOM (OFCOM) regarding the
>> official speed test measurement system which is proposed in the FDV
>> (Fernmeldedienstverordnung).
> 
> So I guess that all these providers will apply nice "QoS" to the well known 
> speedtest prefix, while still applying negative "QoS" for the competition, or 
> by not doing proper peering etc etc etc...
> 
> What is the point of doing this, when it will never match reality?
> 
> 
> Also, it seems that there are monopoly providers who are present at IXs and 
> won't peer then with other ISPs, thus not very useful all that, as the 
> speedtest will be amazing, but the actual packets to the other ISP will fly 
> over timbooktoo...
> 
> 
> Thus maybe, next to speedtests to standardized sinkholes, doing speedtests 
> between ISPs is a good idea; of course, with changing IPs.
> 
> That is: if you participate in this speedtest setup, you host a bunch of 
> nodes in your network, which automatically do speedtests & traceroutes all 
> the time.
> 
> Something akin to RIPE's RIS system, or NLNOG Ring or heck Sam Knows, but 
> then a non-corrupt version of that ;)
> 
> Greets,
> Jeroen


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SafeHost AS21217 accused to leak routes for two hours to China Telecom AS4134 - anyone from SafeHost to comment?

[Fredy Kuenzler]

https://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traffic-through-china-telecom/

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
Switzerland

http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Init7 is about to reconnect SwissIX

[Fredy Kuenzler]

As some may know Init7 decided to leave SwissIX at the end of 2018
mainly to protest against the recent policy of the not-for-profit
SwissIX association.

A decade ago SwissIX was completely volunteer driven, offering peering
infrastructure for no recurring fee. This had changed over time and
ended in an very high fee for a 10gig port of CHF 750 per month
(including a 2nd port for redundancy), which is a lot of money,
comparing other exchanges with similar size and structure such as LONAP
and considering current hardware pricing.

As a matter of fact, SwissIX ports were twice as expensive as the
commercial internet exchange of Equinix in Zürich.

This resulted in accumulation of cash on SwissIX bank account, as well
as rather high consulting fees paid to people which apparently abandoned
the community volunteering idea of the association.

For more details please refer to
http://lists.swinog.ch/public/swinog/2018-December/007105.html


What happend since then:

The SwissIX board reconsidered their price policy quicker than expected
and lowered port prices to a reasonable level with effect of beginning
of 2019. After all Init7's protest leave was for good, as everybody has
to pay less ... you may show your gratitude by sending a 10pack of your
favorite beer to Winterthur - delivery address in the footer ;-)

Init7 is now back and currently reconnecting with two redundant 10gig:
in the recently established site of green.ch in Lupfig, along with
e-shelter in Rümlang. The connections should be ready in a few days, as
we are waiting for cross connect delivery.

A few words about our peering policy - please consider before sending a
request:

1. Init7 AS13030 is not peering with SwissIX Route Servers

2. Init7 is not peering with transit customers or customer customers

3. Init7 expects you to setup 4 BGP sessions (v4, v6 to each router)
without MD5

4. Init7 expects you to have an up-to-date PeeringDB record

5. Any peering request should be sent to peering at init7 dot net
exclusively

6. If there is more traffic than a few hundred Mbps, Init7 expects you
to setup at least one preferred PNI in any common location to offload
traffic and dependency from public infrastructure

7. Init7 expects you to send beer - ehm no


So here we are again, because peering matters.

Happy peering!

Fredy on behalf of Init7, SwissIX President 2004 - 2009

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] New BÜPF / VÜPF: Technical, Organisational and Administrative Requirements, March 1, 2019

[Fredy Kuenzler]

Did anyone notice and read the new BÜPF / VÜPF Technical, Organisational
and Administrative Requirements, valid from March 1, 2019?

To my understanding FDAs with reduced requirements don't have to do
anything.

Press release in DE/FR/IT

DE
https://www.admin.ch/gov/de/start/dokumentation/medienmitteilungen.msg-id-73716.html

FR
https://www.admin.ch/gov/fr/accueil/documentation/communiques.msg-id-73716.html

IT
https://www.admin.ch/gov/it/pagina-iniziale/documentazione/comunicati-stampa.msg-id-73716.html

-- 
Fredy Kuenzler
Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Byebye SwissIX, hello Equinix Zurich Exchange

[Fredy Kuenzler]

More than 10 years ago Init7 unplugged from the Exchange formerly known
as TIX Telehouse Internet Exchange in Zurich.

When we decided to do this, it was evident that SwissIX was offering
much more value for money, in fact, SwissIX offered ports without
recurring monthly fees. SwissIX was completely community driven and a
lot of volunteer work made it happen. The fact of free ports made
SwissIX big in the number of participants. (Disclaimer: I was president
of the SwissIX association between 2004 and 2009).

This has changed. The SwissIX association decided to charge for ports
above 1 Gigabit a few years ago, in order to renew the infrastructure
and to pay a salary for operations (to my knowledge SwissIX pays one
part time employee). I respect that decision, while I was not supporting
it. Consequently Init7 downgraded to 1 Gigabit then and did not accept
new peers ever since.

The price for a 10 Gigabit port apparently was lowered recently to CHF
750 per month. Which sums up to CHF 9000 per year. The 2nd port is
cheaper: CHF 400 per month. Details can be found here:
https://www.swissix.ch/participation

I made a quick count of the ports and found ~100 ports with 10 Gigabit
and two 100 Gigabit ports (according to PeeringDB). Assuming that 50%
are secondary ports a quick estimate of the association revenue adds up
to this sum:

50* CHF 750  = CHF 45
50* CHF 400  = CHF 24
2*  CHF 2600 = CHF  62400

Total≃ CHF 75 per year, not including membership fees

I suppose that this amount is sufficient to buy the complete equipment
required to operate the SwissIX peering mesh twice a year (yes, gear
gets cheaper these days; though it's an absurd example) and still
includes the salary of the one part time employee.

Since such a charging and revenue scheme is in force for several years I
suppose SwissIX has accumulated a seven-digit fortune. However it seems
that no one really knows about it, as the association of SwissIX didn't
make financial reports accessible on the website (I assume they have
been presented on the yearly General Meetings only, though it's not
possible for all association members to be part of it). So the question
remains for many of us: Where did the money go? SwissIX is hardly
visible in the international community, so I guess "money was spent for
Marketing" is not a valid answer.

SwissIX port fees are today among the most expensive in Europe (not
including any membership fees), and all of these Exchanges are way
bigger in terms of traffic and marketing efforts:

LINX 750£ + 424£ (1st, 2nd)
AMS-IX 720€
DE-CIX - no price list published anymore, depends on your negotiation
skills...
Equinix Paris: €400
MIX Milano €750 which includes 1/3 cabinet and power

SwissIX claims to be "Not for Profit". Equinix, in contrary, is listed
on the stock market. Still, the first 10 Gigabit port on Equinix Zurich
Exchange costs CHF 400 per month and includes a cross connect. That's
about half of the cost of the Not-for-Profit SwissIX.

More than 10 years ago, Init7 unplugged from the Exchange formerly known
as TIX Telehouse Internet Exchange in Zurich. Now we are reverting this
decision, as preconditions have reverted too. Init7 has cancelled it's
membership of the SwissIX association to the end of 2018 and will unplug
the remaining 1 Gigabit port anytime soon.

We are happy to accept new peering sessions at Equinix Exchange Zurich
as long as the requirements are met (no peering with customers or
customers of customers). We are also happy to accept new PNI peers in
any common location, if resources are available. Please send inquiries
to peering at init7 dot net.

Happy Peering and good luck, SwissIX.


PS. some useful URLs:

History of SwissIX: https://www.swissix.ch/about
Where it all started - SwiNOG 1: https://www.swinog.ch/meetings/swinog1/

-- 
Fredy Kuenzler
Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Announcing mirror.init7.net

[Fredy Kuenzler]

As SWITCH has announced the sunset of http://mirror.switch.ch/ a while
ago we are happy to announce a successor mirror.init7.net.

https://mirror.init7.net

By supporting IPv6 and legacy IPv4 and https as well as legacy http we
hope to be able to support the Opensource- and Internet-Community in the
future.

In case your DNS resolver is broken we gave mirror.init7.net nice and
easy to memorize IP addresses:

https://2001:1620::1620
https://109.202.202.202

We would like to express our gratitude to SWITCH for providing a mirror
service for much longer than a decade.


PS. a hint for Debian and Ubuntu users - please ensure you have the
package apt-transport-https installed to use https.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Twitter: @init7
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Fwd: mirror.switch.ch to be closed down

[Fredy Kuenzler]

Update: PCTipp made the news public to a broader audience and established the 
hashtag: #SaveSwitchMirror 

http://m.pctipp.ch/news/artikel/nach-jahrzehnten-switch-schaltet-mirror-services-ab-90387/

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
Switzerland

http://www.init7.net/


Anfang der weitergeleiteten Nachricht:

> Von: Fredy Kuenzler 
> Datum: 22. August 2018 um 15:40:10 MESZ
> An: swi...@swinog.ch
> Betreff: mirror.switch.ch to be closed down
> 
> SWITCH announced that they plan to close down mirror.switch.ch. See
> announcement http://mirror.switch.ch/
> 
> I personally think this is very sad. In the name of the community I
> would like to thank SWITCH for their support over all these years.
> 
> However I would like to start the discussion how we can keep
> mirror.switch.ch alive as a community effort.
> 
> Can the decision makers at SWITCH please explain the preconditions?
> Funding for new hardware? Throw in some bandwidth? Colocation? Server
> management?
> 
> Please discuss.
> 
> -- 
> Fredy Kuenzler
> Init7
> 

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] mirror.switch.ch to be closed down

[Fredy Kuenzler]

SWITCH announced that they plan to close down mirror.switch.ch. See
announcement http://mirror.switch.ch/

I personally think this is very sad. In the name of the community I
would like to thank SWITCH for their support over all these years.

However I would like to start the discussion how we can keep
mirror.switch.ch alive as a community effort.

Can the decision makers at SWITCH please explain the preconditions?
Funding for new hardware? Throw in some bandwidth? Colocation? Server
management?

Please discuss.

-- 
Fredy Kuenzler
Init7



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] google.ch high latency

[Fredy Kuenzler]

To our knowledge google is doing some planned maintenance in their
Zurich Interxion site. Should take several hours.

Sit back, drink tea, wait.

Everything will be back to normal.



On 28.11.2017 18:43, Silvan M. Gebhardt wrote:
> I have lost the peering with google on SwissIX for some reason
> 
> 
> 
> - Ursprüngliche Mail -
> Von: "Nico Schottelius" <nico-swino...@schottelius.org>
> An: "Kägi Adrian" <adrian.ka...@dvbern.ch>
> CC: swinog@lists.swinog.ch
> Gesendet: Dienstag, 28. November 2017 18:06:14
> Betreff: Re: [swinog] google.ch high latency
> 
> Hey Adrian,
> 
> various E-Mails are delayed from our site today and also latency to
> google is a bit higher than usual:
> 
> [18:05] feder:~% ssh mirror.datacenterlight.ch " ping -c3 www.google.ch; ping 
> -c3 euler.ethz.ch"
> PING www.google.ch (216.58.205.99) 56(84) bytes of data.
> 64 bytes from mil04s26-in-f3.1e100.net (216.58.205.99): icmp_seq=1 ttl=54 
> time=23.1 ms
> 64 bytes from mil04s26-in-f3.1e100.net (216.58.205.99): icmp_seq=2 ttl=54 
> time=23.3 ms
> 64 bytes from mil04s26-in-f3.1e100.net (216.58.205.99): icmp_seq=3 ttl=54 
> time=23.2 ms
> 
> --- www.google.ch ping statistics ---
> 3 packets transmitted, 3 received, 0% packet loss, time 2002ms
> rtt min/avg/max/mdev = 23.159/23.245/23.308/0.139 ms
> PING euler.ethz.ch (129.132.71.59) 56(84) bytes of data.
> 64 bytes from hpc-euler-lb.ethz.ch (129.132.71.59): icmp_seq=1 ttl=50 
> time=7.28 ms
> 64 bytes from hpc-euler-lb.ethz.ch (129.132.71.59): icmp_seq=2 ttl=50 
> time=7.84 ms
> 64 bytes from hpc-euler-lb.ethz.ch (129.132.71.59): icmp_seq=3 ttl=50 
> time=7.36 ms
> 
> --- euler.ethz.ch ping statistics ---
> 3 packets transmitted, 3 received, 0% packet loss, time 2003ms
> rtt min/avg/max/mdev = 7.281/7.498/7.846/0.248 ms
> [18:05] feder:~%
> 
> Best,
> 
> Nico
> 
> 
> Kägi Adrian <adrian.ka...@dvbern.ch> writes:
> 
>> Hi all
>> We’re face high latency of google.ch (and other European tlds) from our 
>> AS203732
>> $ ping www.google.ch 95ms
>> $ ping www.google.fr 80ms
>> $ ping www.google.de<http://www.google.de> 90ms
>>
>>
>> -> % traceroute www.google.ch
>> traceroute to www.google.ch (216.58.205.131), 30 hops max, 60 byte packets
>> 1  192.168.11.1 (192.168.11.1)  0.116 ms  0.151 ms  0.124 ms
>> 2  dvbnre01-po8-2g.dvbern.ch (185.125.164.2)  0.456 ms  0.568 ms  0.889 ms
>> 3  i64beb-011-ten0-2-0-2x136.bb.ip-plus.net (193.247.169.41)  1.622 ms  
>> 1.312 ms  1.354 ms
>> 4  i64beb-010-ten2-5.bb.ip-plus.net (138.187.157.36)  1.179 ms 
>> i64beb-000-ten2-5.bb.ip-plus.net (138.187.157.22)  1.057 ms 
>> i64beb-010-ten2-5.bb.ip-plus.net (138.187.157.36)  0.877 ms
>> 5  i79zhb-005-ten0-5-0-4-7.bb.ip-plus.net (138.187.130.46)  3.332 ms 
>> i62bsw-025-ten0-1-0-5.bb.ip-plus.net (138.187.130.44)  5.882 ms 
>> i79zhb-005-ten0-5-0-4-7.bb.ip-plus.net (138.187.130.46)  3.312 ms
>> 6  i00mil-005-ae1.bb.ip-plus.net (138.187.129.27)  7.605 ms 
>> i00dcx-005-hun2-0-0.bb.ip-plus.net (138.187.129.83)  6.340 ms 
>> i00mil-005-ae1.bb.ip-plus.net (138.187.129.27)  6.922 ms
>> 7  de-cix.fra.google.com (80.81.192.108)  8.945 ms google.mix-it.net 
>> (217.29.66.96)  45.949 ms de-cix.fra.google.com (80.81.192.108)  8.862 ms
>> 8  108.170.251.208 (108.170.251.208)  8.786 ms 108.170.251.144 
>> (108.170.251.144)  16.055 ms 108.170.252.19 (108.170.252.19)  8.986 ms
>> 9  108.170.229.168 (108.170.229.168)  9.417 ms 209.85.242.79 (209.85.242.79) 
>>  9.364 ms 216.239.42.13 (216.239.42.13)  56.092 ms
>> 10  mil04s27-in-f131.1e100.net (216.58.205.131)  58.975 ms  59.013 ms 
>> 209.85.254.61 (209.85.254.61)  14.983 ms
>>
>> Providers: Swisscom, UPC, Cyberlink
>>
>> Does anyone facing same issues?
>>
>> Cheers Adrian
>>
>> Adrian Kägi
>> Senior System Engineer
>>
>> DV Bern AG | Nussbaumstrasse 21 | Postfach 106 | CH-3000 Bern 22
>> T +41 31 378 24 24 | D +41 31 378 24 60
>> www.dvbern.ch<http://www.dvbern.ch>

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Pinging a SALT Mobile IP Engineer (AS15796)

[Fredy Kuenzler]

Please contact me offlist. Thanks.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
Switzerland

http://www.init7.net/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SmokePing 3.0 Project

[Fredy Kuenzler]

Tobi,

Sounds like a plan! I suggest do make a project on any international accepted 
crowdfunding plattform for the 50k (plus some reserve), we spread the link via 
all *NOG lists and social media and I'm confident that money will be raised in 
no time.

On behalf of the international network community I would like to express my 
appreciation for all your work and effort you made so far.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


> Am 21.11.2016 um 09:02 schrieb Tobias Oetiker <t...@oetiker.ch>:
> 
> Good Morning 
> 
> At SwiNOG-30, I was approached by several people, praising the merits of 
> SmokePing and also wondering when version 3 will come out. I was happy for 
> the praise, but did not have any concrete announcements for a new version, 
> beyond bugfixes. 
> 
> So that got me thinking ... would there be sufficient support among SwiNOG 
> members to raise the money for writing Smokeping version 3?
> 
> 
> Here is my feature shortlist: 
> 
> * non-blocking polling engine - by using an event loop at the heart of the 
> polling engine, smokeping becomes much more scaleable, as it can wait for 
> many probes to return information in parallel without forking, thus reducing 
> the memory impact.
> 
> * interactive charts as shown in the demo at SwiNOG without
> 
> * a responsive UI working with mobile devices
> 
> * the ability to pull in target information from a database
> 
> My current estimate creating this rewrite of is around 50k CHF.
> 
> If you are willing to chip in, and if you have requirements of your own, 
> please be in touch.
> 
> cheers
> tobi
> 
> -- 
> Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
> www.oetiker.ch t...@oetiker.ch +41 62 775 9902
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Fredy Kuenzler]

On 01.10.2016 17:35, Gert Doering wrote:
> I think this is an awesome idea.
> 
> The situation is similar here in DE - nobody could stand an 1 Tbit 
> DDoS attack, and a large number of content offerings are targeted 
> only to german speaking customers, so if DE/A/CH work, 99% of the 
> customers are still able to reach the site.

Maybe we should widen the approach and define a collaborative BGP
community "do announce only in country X", when X is some ISO-3166
country number? A prefix then can contain multiple communities, i.E. to
cover the whole DACH region.

https://de.wikipedia.org/wiki/ISO-3166-1-Kodierliste

> I'm not really sure how this would work in your example - what if
> you have two customers in a given BGP announcement, one of them
> *does* want to be reached world-wide (like, corporate VPNs) and the
> other one is attacked?  Split the aggregate, or bit the bullet and
> have all of them with limited reach, for the time being?

I suppose the e-commerces using such a mechanism would be able to afford
their own /24 and a decent block of IPv6 space (in other words: buy
legacy PI or become LIR). Another option is new business for managed
hosting "DDOS bullet proof Switzerland Hosting", where the hoster
dedicates a /24 or bigger for permanent limited propagation.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Fredy Kuenzler]

Since we see >1Tbps DDOS attacs in the wild, I suppose out-of-the-box
DDOS mitigation suppliers have lost this race. There is no operator in
Switzerland which can handle 1Tbps DDOS attacks.

When we saw DDOS against digitec.ch and others earlier this year, I was
a bit surprised that none of the so called "experts" proposed regional
BGP propagation as a remedy.

Given that e-commerce such as digitec.ch is assumingly making 99.9% of
the revenue within Switzerland, their prefix doesn't need to reachable
from all over the world. If the prefix of a Swiss e-commerce would be
reachable from Swiss broadband providers only, the DDOS is mitigated, as
the vast majority of the botnet is lacking a route to the targeted
victim IP address.

To achieve this I think we need a collaborative community effort setting
up a common procedure and define a BGP communitiy with the effect "do
not announce beyond Switzerland".

An e-commerce should be able to hit the button injecting this defined
BGP community when under attack (or permanently, of course).

I suppose to make this idea a success we need to have all major
operators in Switzerland on board (3303, 6730, 6830) and I suppose the
smaller operators will follow in their own interest to avoid blackholes.

Anyone? I think it's good if a somewhat "neutral body" with decent BGP
knowledge could take the lead for such a working group, maybe SWITCH or
SwissIX?

--
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Brocade MLXe: Random Linecard Reboot - anyone else?

[Fredy Kuenzler]

Friday night we observed several Brocade MLXe linecards rebooting (several 
locations, i.e. Amsterdam, Frankfurt, Geneva), which caused network instability 
due to flapping iBGP etc.

As of now we know that iWay and nine.ch suffered from similar issues in the 
same time window, and we believe that they use also Brocade MLXe.

Tonight around 4 a.m. symptoms occurred again, on a lesser degree. nine.ch 
reports it too.

For reference the tickets:
http://www.init7.net/de/status/?ticket=10348
https://status.nine.ch/en/messages/544
https://www.iway.ch/iway/status/

Did anyone else observed similar symptoms?

Since these routers operate in various locations and ASNs but are the same 
make/model I suppose it's a software security issue. Can malicious packets 
force a linecard reboot?

Regards,

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swisscom now peering with Netflix

[Fredy Kuenzler]

In case you missed it: Swisscom now peering with Netflix after big
shitstorm in social media and general media yesterday and today.

http://pastebin.com/sgwD3qfh

I suppose the peering policy of Swisscom is now obsolete, as well as
their monetizing OTT strategy.

It's a good day for real netneutrality, not the crippled version of some
larger Swiss operators.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SAVE THE DATE - 15.10.2015

[Fredy Kuenzler]

Dear Core Team,

On behalf of the community I would like to thank you for putting together 
another great Swinog event.

Re save the date: not sure whether you really want to have Swinog in the middle 
of most autumn school holidays. Please reconsider Oct. 15. Many of us have 
families...

Thanks,

Fredy/Init7

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


 Am 06.05.2015 um 20:40 schrieb Simon Ryf si...@swinog.org:
 
 Dear SwiNOGers
  
 Thank you for a great day, lots of input and your support!!
 We don’t have yet the confirmation for the Gurten but don’t want to let you 
 wait any longer :-P
  
 Save the date for SwiNOG #29 – 15.10.2015
  
 We’ll keep you posted.
 I wish you a save trip home and looking forward to seeing you soon.
  
 Br
 Simon
 SwiNOG
  
 P.S. This is no CFP but that doesn’t mean that you can’t already submit Ideas 
 :)
 
 ___
 swinog mailing list
 swinog@lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] PI address space needed

[Fredy Kuenzler]

Am 13.04.2015 um 08:38 schrieb Andre Timmermann:
 currently we (local.ch) are hosted in two different datacenters,
 each with a dedicated uplink.
 
 In order to improve the reliability and to dissolve single points of 
 failure I want to do a proper BGP setup.
 
 One step of the whole thing is getting a PI space. As I do not want
 to become a LIR (too tedious, too much work) we want to buy a /24 for
 our setup.
 
 Can anyone point me into the right direction (or even sell a /24 ;))?

PI is history since Sept. 14, 2012.
https://www.ripe.net/internet-coordination/ipv4-exhaustion

You may want to talk to any of the v4 broker or become LIR nevertheless,
which is rather easy in fact.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swisscom Webserver via IPv6 down?

[Fredy Kuenzler]

We assumed a nasty 512k CAM issue in the first place but it seems that
the Swisscom Webserver is not accessible via IPv6. Anyone else?

F.



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] swinog Digest, Vol 115, Issue 3

[Fredy Kuenzler]

Am 09.08.2014 12:20, schrieb Florian Bruhin:
 * berquet matthieu berq...@essec.fr [2014-08-09 12:01:18 +0200]:
 *
 Compte de messagerie inexistant.
 *
 
 Since this seems to be an automated message: Could someone please 
 remove that address from the list or take some other appropriate 
 action?

User has been set to moderated.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] 3G Repeater

[Fredy Kuenzler]

Is anyone familiar with 3G repeater gear? I'm asking for a neighbor whose 
family owns a cottage in a Swiss mountain valley with poor 3G reception.

Any recommendation for gear which is easily installable, more or less 
plug-n-play, not too expensive (less than CHF 1000) and last but not least 
legal to operate would be appreciated.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swinog BE132 ZRH

[Fredy Kuenzler]

Am 05.05.2014 17:34, schrieb Roger Buchwalder:
 Since nobody will come to the Swinog BE, I will cancel the event. :(

Is SwiNOG dead yet?!

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Lösung für eine SMS-Notfallalarmierung und Statuswebseite

[Fredy Kuenzler]

http://www.dolphin.ch/ bietet solche Services ab Stange.

Wenn das nicht passt, frag mal Andreas Fink, er ist der SMS Guru. 
http://www.fink.org

Wir selber haben eine sälberglismete Lösung im Einsatz, basierend auf Kannel, 
mit SMS-Flatrate-Simkarten, günstig und effizient. Die 3G Böxli sind glaub von 
Siemens, der genaue Typ müsste ich aber erst raussuchen.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


 Am 17.04.2014 um 10:24 schrieb Andy Christen andreas.chris...@ergon.ch:
 
 Grüezi und hoi
 
 Wir suchen für unsere Firma eine Lösung für eine SMS-Notfallalarmierung.
 Leider haben wir für diese Situation kein passendes öffentliches Angebot 
 finden können,
 darum gelange ich an die Swinog-Mailingliste und hoffe, dass jemand von 
 Ihnen/euch
 eine annähernd gleiche Lösung für sich selbst oder Kunden im Einsatz hat.
 
 Hier also die Anforderungen die wir haben:
 Anforderungen:
 Upload von Natelnummern auf ein Portal/Webseite mit Möglichkeit einer 
 Gruppierung der Einträge.
 Versand von Info-/Status-SMS an die eingetragenen SMS-Gruppen per Webseite 
 (admin) und/oder SMS-Forward.
 Status-Webseite öffentlich über dasselbe Portal einfach aufruf- und wartbar - 
 ev. Status mit SMS updatebar
 Beispiel Inhalt Webseite/Statusseite:
 14.04.2014 09:54  E-Mail Service läuft wieder
 14.04.2014 08:01  E-Mail läuft nicht. Wir sind dran.
 01.04.2014 00:01  Kein Scherz: alle Systeme grün.
 
 Vielen Dank schon im voraus und allen schöne und wo möglich ruhige Ostertage.
 
 enGruess, Andy Christen
 
 -- 
 andreas.chris...@ergon.ch,   +41 44 268 8927,   
 http://www.ergon.ch.
 Ergon Informatik AG,  Kleinstrasse 15,  8008 Zuerich, 
 Switzerland.
 
 e r g o nsmart people - smart software 
 
 
 
 ___
 swinog mailing list
 swinog@lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] More Specifics (was: 84.253.0.0/19 (bluewin, old cybernet space) badly routed)

[Fredy Kuenzler]

Am 16.04.2014 13:08, schrieb Jeroen Massar:
 More specifics are evil and give weird routing in various locations.

Not always. When Init7 started to propagate more specifics to it's four
/19 and /18, about 2gig of inbound traffic switched from transit links
to peering links. This is real money and IMHO a valid reason to
propagate selectivly more specific prefixes (i.E. two /20 for one /19).

Massiv deaggregation however is indeed evil, and there are just too many
networks out there which do it unconsciously in a very stupid way.

Init7 is filtering away more than 1 more specific prefixes from
transit. To explain this a bit further I'd like to point to a
presentation I gave a while ago during NANOG 54.

https://www.nanog.org/meetings/nanog54/presentations/Monday/Kuenzler.pdf

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SwiNOG #27 - Call for Papers

[Fredy Kuenzler]

Steven, all,

Am 31.01.2014 22:57, schrieb Steven Glogger:
 The 27th meeting of the Swiss Network Operators Group (SwiNOG) will
 be held in Berne on top of the Gurten on April 9th 2014.

This is the week of GPF9... I guess some folks will be in Whistler, BC.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Anyone round Zurich with an OTDR and a little bit of time?

[Fredy Kuenzler]

André,

We are investigating what went wrong. As far as I know this is a special
case and we are reselling a simple darkfiber of Sunrise (very uncommon),
and it seems that a ticket has been opened with Sunrise a while ago. As
it's a Layer-1 service we are unable to check the functionality.

Someone from our team will get back to you offlist once we have further
information.

Sorry for the issue.

Best regards,
Fredy / Init7


Am 03.12.2013 13:53, schrieb Andre Timmermann:
 Hi List
 
 I'm trying to debug a fiber connection between two datacenters in 
 Zurich. Unfortunately the other companies involved are not very 
 responsive. And please bear with me, I am not a network engineer, I
 am just the poor guy who got this thingie on his desk...
 
 Here is what I am trying to achieve:
 
 In each datacenter we got an Arista DCS-7050T-52 with each an SFP 
 1000BASE-LX which supports up to 10km links on single-mode and 550m
 on multi-mode fiber.
 
 We got a 1Gbps dedicated Layer2 Connection incl. Managed Switch
 from Init7. As far as I know, they are using Sunrise as partner to
 provide the connection. We are connecting to a SMF with 1310nm.
 
 If I put everything together, I still see a notconnect on the 
 switchport. Unfortunately the Platin support seems to be more like
 Bronze, we do not get a proper response right now.
 
 Currently I can't tell if there is something wrong within our setup
 or within the setup of our provider.
 
 I would like to get a third party with a proper testing device (and
 more experience than me) to meet me in the datacenter(s) and help me
 to find evidence what the heck is going on.
 
 Best regards,
 Andre Timmermann
 


-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Scenic route of the day: L3 towards UPC

[Fredy Kuenzler]

Anyone else seeing this... do we have a new peering spat or is it just a
random routing issue?

Regards,
Fredy



traceroute to 84.116.204.234 (84.116.204.234), 30 hops max, 60 byte packets
 1  r1zlz1.core.init7.net (77.109.136.233) [AS13030]  23.682 ms  23.741
ms  23.775 ms
 2  r1zrh1.core.init7.net (77.109.128.209) [AS13030]  0.188 ms
r1zrh2.core.init7.net (77.109.128.74) [AS13030]  0.199 ms
r1zrh1.core.init7.net (77.109.128.209) [AS13030]  0.193 ms
 3  r1bas1.core.init7.net (77.109.128.130) [AS13030]  1.090 ms  1.129 ms
r1fra1.core.init7.net (77.109.128.250) [AS13030]  38.806 ms
 4  r1fra2.core.init7.net (77.109.128.133) [AS13030]  5.997 ms  5.988 ms
 6.016 ms
 5  TenGigabitEthernet8-1.ar2.FRA4.gblx.net (64.213.54.33) [AS3549]
6.653 ms  6.134 ms  6.673 ms
 6  ae7.edge2.SanJose3.level3.net (4.68.62.177) [AS3356]  153.420 ms
152.925 ms  153.399 ms
 7  vlan70.csw2.SanJose1.Level3.net (4.69.152.126) [AS3356]  161.564 ms
vlan90.csw4.SanJose1.Level3.net (4.69.152.254) [AS3356]  161.054 ms
vlan70.csw2.SanJose1.Level3.net (4.69.152.126) [AS3356]  161.807 ms
 8  ae-71-71.ebr1.SanJose1.Level3.net (4.69.153.5) [AS3356]  160.948 ms
ae-61-61.ebr1.SanJose1.Level3.net (4.69.153.1) [AS3356]  160.512 ms
160.433 ms
 9  ae-2-2.ebr2.NewYork1.Level3.net (4.69.135.186) [AS3356]  161.355 ms
 161.310 ms  161.509 ms
10  ae-47-47.ebr2.NewYork2.Level3.net (4.69.201.34) [AS3356]  161.949 ms
4.69.201.38 (4.69.201.38) [AS3356]  161.581 ms  161.724 ms
11  ae-1-100.ebr1.NewYork2.Level3.net (4.69.135.253) [AS3356]  162.124
ms  161.121 ms  161.658 ms
12  4.69.201.85 (4.69.201.85) [AS3356]  161.126 ms 4.69.201.93
(4.69.201.93) [AS3356]  161.524 ms 4.69.201.85 (4.69.201.85) [AS3356]
161.193 ms
13  ae-72-72.csw2.Washington1.Level3.net (4.69.134.150) [AS3356]
161.151 ms  161.558 ms ae-82-82.csw3.Washington1.Level3.net
(4.69.134.154) [AS3356]  161.627 ms
14  ae-33-80.car3.Washington1.Level3.net (4.69.149.133) [AS3356]
185.388 ms ae-43-90.car3.Washington1.Level3.net (4.69.149.197) [AS3356]
 263.449 ms ae-23-70.car3.Washington1.Level3.net (4.69.149.69) [AS3356]
 264.054 ms
15  UPC-BROADBA.car3.Washington1.Level3.net (4.79.168.202) [AS3356]
161.118 ms  161.109 ms  160.838 ms
16  84.116.134.61 (84.116.134.61) [AS6830]  167.752 ms  167.674 ms
159.751 ms
17  at-vie15a-ra1-xe-2-2-0.aorta.net (84.116.130.245) [AS6830]  160.584
ms  161.327 ms 84-116-130-62.aorta.net (84.116.130.62) [AS6830]  160.749 ms
18  hu-bud02a-ra3-xe-1-1-0.aorta.net (84.116.130.194) [AS6830]  161.284
ms  160.877 ms ch-zrh02a-ra1-xe-2-0-0.aorta.net (84.116.130.226)
[AS6830]  160.285 ms
19  84.116.204.234 (84.116.204.234) [AS6830]  160.346 ms  160.831 ms
160.272 ms


-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Scenic route of the day: L3 towards UPC

[Fredy Kuenzler]

Am 26.09.2013 12:33, schrieb Jeroen Massar:
 Anyone else seeing this... do we have a new peering spat or is it
 just a random routing issue?
 
 Looks to be just that prefix, as for instance:

Actually we've seen more than 300 prefixes with the same path. Meanwhile
the journey to california and back is history. Apparently there was just
a BGP session down between L3(GBLX) and UPC. Not much n+1, though...

Nevermind and sorry for the noise.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] OFFTOPIC: Hardware needed

[Fredy Kuenzler]

Am 26.09.2013 17:24, schrieb Silvan M. Gebhardt:
 Anyone got a recommendation where to look at? I don't like to have to
 go to oracle directly

noone home at Oracle, they all went sailing *scnr*

F.



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Domain ip-plus.net hijacked?

[Fredy Kuenzler]

It seems that the Domain ip-plus.net got hijacked by some domain grabber:
http://www.ip-plus.net/

Traceroutes to any Swisscom host look rather ugly.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] UPC AS6830 Looking Glass / Traceroute?

[Fredy Kuenzler]

Is anyone aware of a UPC AS6830 Looking Glass and/or Traceroute? Or
could anyone give us shell access to a host which is within AS6830?

Thanks,

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Replacement Fan for C2950-T-24?

[Fredy Kuenzler]

Try Pusterla at Hohlstrasse. They used to have all kinds of electronic 
components a couple of years ago. Just walk in with the broken fan and ask for 
a spare part...

Von meinem iPhone gesendet

Am 25.06.2013 um 19:33 schrieb Andre Oppermann opperm...@networx.ch:

 Does anyone know a good source for replacement fans for the Cisco 2950-T-24?
 
 A silent version would be preferred.  The fan is 40x20mm and has a 3-pin
 connector.  Yes, I've already checked Digitec but they don't seem to have
 anything that matches.
 
 Thanks
 -- 
 Andre
 
 
 ___
 swinog mailing list
 swinog@lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Fwd: Technical Instructor for AXIS Project

[Fredy Kuenzler]

FYI - pour les romands: who can help and give a French training to our 
colleagues in the African Internet community? It's rather short term (you 
likely will need a visa for Burkina Faso, please hurry) ... I'm sure that 
Michuki can answer any questions.


Regards,
Fredy



 Original Message 
Subject:[Euro-IX-Members] Technical Instructor for AXIS Project
Date:   Thu, 21 Feb 2013 16:14:44 +
From:   Bijal Sanghani bijal.sangh...@euro-ix.net
To: EURO-IX Members List memb...@euro-ix.net



Dear Members,

Michuki Mwangi of ISOC is looking for a French speaking technical
trainer to help with the AXIS project, details about the AXIS project
can be found here:
http://www.internetsociety.org/news/african-unionau-selects-internet-society-support-establishment-internet-exchange-points-across

The Technical Workshop is scheduled for 4 - 8 March in Burkina Faso.

The course covers the following topics:

* Internet, TCP/IP and Routing
* Routing Protocols
* OSPF and BGP for Internet Service Providers (ISPs)
* BGP, Attributes, Policy
* BGP Scaling and Multi-homing
* IXP design, set-up and operation
* IXP Laboratory Exercises

ISOC through the AXIS project will cover the travel and
accommodation expenses for the instructor and assist with the logistics.
 If you are interested and available during this time and would like
more information please contact either myself or Michuki (cc'd).

Kind regards,

Bijal Sanghani
Head of Secretariat
Euro-IX


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] (secret) ITU conference in Dubai: Swiss Delegation?

[Fredy Kuenzler]

Does anyone know the Swiss delegate of the upcoming ITU conference in Dubai? It 
would be appropriate if the delegate of our democratic country actually has a 
known face and we all know how he/she is going to vote.

The topics in this conference are a real threat to the Internet we know and 
love (refer to the SwiNOG #25 slides of Arnold). 

If you are not familiar yet with the topic, watch (and share) this website and 
video:

https://www.whatistheitu.org/
http://www.youtube.com/watch?v=XzNQarkk95Q

Regards,
Fredy Künzler / Init7



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] (secret) ITU conference in Dubai: Swiss Delegation?

[Fredy Kuenzler]

Am 27.11.2012 22:37, schrieb Fredy Kuenzler:

Does anyone know the Swiss delegate of the upcoming ITU conference in
Dubai? [...]


In response to my tweet pointing to this email in the SwiNOG mailinglist 
archive I got a response with five names of the Swiss Delegation:



There was the accreditation list mailed to some ISOC list last week, 5
people on the Swiss delegation:

Mr Frédéric RIEHL, Chef des Affaires Internationales, OFCOM (Suisse) /
BAKOM, frederic dot riehl at bakom dot admin dot ch

Mr Hassane MAKKI, Affaires Internationales, Federal Office of
Communications - OFCOM, hassane dot makki at bakom dot admin dot ch

Mr Raphael SCHERRER, Conseiller Economiste, OFCOM (Suisse) / BAKOM,
raphael dot scherrer at bakom dot admin dot ch

Mr Dirk-Olivier VON DER EMDEN, Conseiller juridique, Office Fédéral de la
Communication (OFCOM/BAKOM), dirk-olivier dot von-der-emden at bakom dot
admin dot ch

Mr Rolf WEBER, Professor, Faculty of Law, University of Zurich

First one is flagged as Head of delegation, second one is deputy.


So we know now that mainly BAKOM/OFCOM people are traveling to Dubai.

Please all individuals refrain from sending personal emails the delegation! 
They don't need geeky comments or even stupid insulting.


I'd rather suggest that the SwiNOG core team is going to formulate a clear 
statement to the Swiss ITU delegation (please note that I left the SwiNOG 
core team 1y ago). SwiNOG needs to speak in a united voice in this matter.


I also hope that general interest media (Swiss television, Tages-Anzeiger, 
Blick et.al.) would pick this out as a central theme, along with special 
interest media (computer/telecommunication). It would be simply great to 
read a large interview with the delegates, where they commit themselves to 
stand for the self-regulated bottom-up Internet as we know and love. Support 
not only from this community but also from general media and us, the Swiss 
people, would strenghten their position... so please, dear journalists 
around, make a move :-) It will have an impact not only in Switzerland, but 
also in neighbouring countries.


Except from heise.de I haven't seen much yet about the ITU conference in 
special interest media (computers/telecommunications). Not sure why, I guess 
inside-it.ch et.al. have some backlog... *hint*


Meanwhile I hope everyone would help to share the link and video I mentioned 
in my previous mail:


https://www.whatistheitu.org/
http://www.youtube.com/watch?v=XzNQarkk95Q

Also I would like to include the link to the slides of SwiNOG #25 of Arnold 
Nipper with some unbiased information:

http://www.swinog.ch/meetings/swinog25/p/11_SwiNOG25-WCIT-20121107.pdf

Thanks for listening and sharing!

--
Fredy Künzler

Init7 (Switzerland) AG
AS13030
Elias-Canetti-Strasse 7
CH-8050 Zürich
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Routing problems @ cablecom?

[Fredy Kuenzler]

Am 26.05.2012 16:43, schrieb Benoît Panizzon:

I'm not able to reach any address @as6772 from cablecom. Anyone else
experiencing such Problems?


We just see only about 40% of the normal traffic load between UPC Cablecom
and Init7 since appx. 15:00 CET. Maybe an issue in the UPC-Cablecom backbone?

--
Fredy Künzler

Init Seven AG
AS13030
Elias-Canetti-Strasse 7
CH-8050 Zürich
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] What GeoIP Locator service do srf.ch, bluewin.ch and iTunes use?

[Fredy Kuenzler]

Am 26.01.2012 15:59, schrieb Steven Glogger:

as far as I heard akamai is doing the stuff for SRF. but i'm sure fredy
knows more about it.


hey... :-)

I can only speak for the SRF radio streams which are distributed by Init7.
Most, actually almost all of them, don't have any geolocation based blocking.

Am 26.01.2012 16:26, schrieb Benoit Panizzon:

The Problem was solved. They use an offline version of the wipmania.com
GeoIP Database. They added our range to their offline database and we
have also submitted the range to wipmania.com as it was flagged
'unknown'.


I wasn't aware of WIPmania. It doesn't look too promising though, as they
claim on there website:


25 Mai 2011 - Letzte Änderung der WorldIP Datenbank

added or changed 8140 networks
100.749.550 IP addresses changed
total 91423 networks


37.17.232.0/21 which was recently allocated to Init7 Germany is also
missing, for example. I submitted this range now. It seems that WIPmania is
not importing new allocation automatically.

Large blocks such as 37.50.0.0/15 and 37.80.0.0/12 which have been allocated
to T-Mobile three days ago should appear immediately, or at least as soon as
they show up in the routing table.

Best regards,

Fredy Künzler
Init7 / AS13030


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom VDSL - TELIA - USA problem

[Fredy Kuenzler]

 Responsetime of hop 12 (80.91.251.98) is much higher than hop 11 
 (80.91.249.113) and a ping test did show lost packets on hop 12 but not on 
 hop 11.
 
 
 11  prs-bb1-link.telia.net (80.91.249.113) [AS1299]  25.882 ms  125.402 ms  
 25.827 ms
 12  ash-bb1-link.telia.net (80.91.251.98) [AS1299]  108.584 ms  113.053 ms 
 ash-bb1-link.telia.net (80.91.252.36) [AS1299]  158.407 ms

Hop 11 is in Paris, hop 12 in Ashburn. I don't see anomalies considering the 
latency, as the atlantic is in between.

The path seems to be multipath, but this is still ok. The loss / congestion 
could be on the return path, for proper diagnosis you need a traceroute from 
the other end, too.

Check return pathes to proxies and compare them to the direct link... and, as 
Victor already said, don't expect guaranteed latecy on a xDSL service...

HTH,
F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] use your voting rights: RIPE NCC general meeting

[Fredy Kuenzler]

Dear all,

As I consider it important to use the democratic rights, I think noone 
should miss the chance of voting at the RIPE NCC general meeting on May 4, 
2011 in Amsterdam:

https://www.ripe.net/lir-services/ncc/gm/may-2011

Any LIR representative who cannot attend in person can either vote 
electronically or pass on his voting right to a proxy. If you think that 
electronic voting is too much hassle, I can offer myself as your proxy 
voter. All you have to do is to fill in this form

http://www.blogg.ch/uploads/ripe-proxyvote-form-fku.pdf
and fax or email it to a...@ripe.net (and please cc me).

Best regards,

Fredy Künzler
Init7 / AS13030


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] for sale: 3* Cisco 7301 Router

[Fredy Kuenzler]

We have 3* Cisco 7301 router for sale (incl. 1Gig ram for full BGP table). 
Please contact me offlist with a quote if you are interested. The boxes are 
available for pickup in Zurich Oerlikon, and we need to charge VAT (if this 
matters for you).


Regards,
Fredy



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IP network not reachable from switzerland - 69.162.65.122, but from outside, eg belarus/brasil

[Fredy Kuenzler]

Am 07.04.2011 17:40, schrieb Stephan Wolf:

we can NOT reach the upper IP from:

- swisscom mobile
- cablecom.biz
- cablecom home
- swissix

but:
from our brasilian firewall I can ping host and reach smtp / http sockets
- also from a belarus provider.

and also from a testsite, hosted in germany / hetzner, the IP is
reachable.

but effectively from not any switzerland ISP reachable :-(


not particularly true...


sad is, that reverse.lstn.net is dropping ICMP packets / traceroutes not
possible in any case

so host 69.162.65.122 is only answering to ICMP echo requests, and
listens to tcp25 and tcp80

could you be so kind and check, if you can connect to this host, and tell
me, via which ISP / peering ?


We have the prefix in our table and are advertising it to Hetzner, I 
suppose. Check our LG in case: http://www.init7.net/looking-glass/index.php


BGP routing table entry for 69.162.64.0/18
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  6461 46475
213.144.128.179 from 213.144.129.65 (213.144.128.179)
  Origin IGP, metric 1, localpref 150, valid, internal, best
  Community: 13030:1 13030:1017 13030:51202
  Originator: 213.144.128.179, Cluster list: 213.144.128.177
  Last update: Thu Apr  7 06:30:31 2011

Best regards,

Fredy Künzler
Init7 / AS13030


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Bluewin dynamic IP-ranges

[Fredy Kuenzler]

Am 09.03.2011 08:02, schrieb steven.glog...@swisscom.com:

'sh ip bgp regexp _44038_' would help, I assume. But note there are
plenty of more-specifics for traffic engineering.


actually you get too much - not only bluewin ,-)


... and after the next Swisscom reorganisation you get less if you stick to
AS44038

*scnr*

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Bluewin dynamic IP-ranges

[Fredy Kuenzler]

Am 07.03.2011 13:02, schrieb Philip Iezzi:

Can someone from Bluewin/Swisscom please provide me with a list of all
possible dynamic IP-ranges Bluewin offers to its customers? I need this
for a firewall rule that should give access to a service for all Bluewin
customers.


'sh ip bgp regexp _44038_' would help, I assume. But note there are plenty
of more-specifics for traffic engineering.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] No moderation of the list queue

[Fredy Kuenzler]

Just a quick note regarding the mailinglist of swi...@swinog.ch:

There is _no_ moderation. Any message which is stuck in the queue is going 
straight to /dev/null. Reason: too much spam arriving in the queue, and no 
time to fish for any legitimate message.


If you happen that your message to the list is not distributed (i.e. showing 
up in the archive http://lists.swinog.ch/public/swinog/), it is discarded. 
Ensure that your sending parameters are correct and resend.


F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP Origin ASN Validation

[Fredy Kuenzler]

Am 15.11.2010 12:39, schrieb Roque Gagliano:

I believe Tim has a point in this comment, we already analyze it
positively internally to add that capability.

When all of these starts rolling-out, you would have a huge percentage of
not-found, that is why you would not want to deny those. There you can
see the importance of generating your ROAs, although you are not
particularly interested in filtering.


While from a technical perspective the BGP Origin ASN Validation is a good
approach, it loads a burden to the system itself and to the BGP engineers
around the globe, just because Pakistan Telecom's network engineer is not
capable to type 'set community no-export' and PCCW (Upstream of Pakistan
Telecom) f***ed up the prefix list (copy-paste for other example, replace
names).

Why should we change a generally good working system just because some
network rookies don't know better? Fix the problem by the source, don't
circumvent it.

My CHF 0.05,
Fredy



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Init7 is hiring: Linux SystemadministratorIn / Web ProgrammiererIn

[Fredy Kuenzler]

http://www.init7.net/jobs-webprogrammierer100.php


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Datenschutzbeauftragter

[Fredy Kuenzler]

Am 14.10.2010 09:24, schrieb Radek Mrskos:

Would this be an opportunity for you?

http://stadt.winterthur.ch/info/jobs/job-detail/job/datenschutzbeauftragten-2493/


No, I don't qualify:

Sie besitzen einen juristischen Hochschulabschluss und insbesondere
gute Kenntnisse im Datenschutz- sowie im Staats- und Verwaltungsrecht.

As a member of the city parlament of Winterthur, which is the election
committee, it would not be possible to vote for myself...

Some insight on this job: it was actually quite a bit of work in the
commission to make this position independent again from the general
administration of the city of Winterthur. I'm looking forward to work on the
level of the parlament with someone competent which understands the issues
of todays data protection. To those in this list with juristic background:
please apply for the job :-)

Best regards,
Fredy Künzler


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Save the date: SwiNOG #21 - Nov 11, 2010

[Fredy Kuenzler]

Dear all,

Please mark in your agenda Nov 11, 2010 for SwiNOG #21. Details will follow.

Best regards,

Fredy Künzler for SwiNOG Core


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BÜPF...again ;)

[Fredy Kuenzler]

Am 19.08.2010 22:27, schrieb Pascal Gloor:

I thought I'd say some words for all small and medium sized ISPs while I
had the SDA/ATS journalist on the phone.

in German:
http://www.tagesanzeiger.ch/digital/internet/berwachungswahn-der-Beamten-in-Bern/story/12403271

 in French: http://www.romandie.com/infos/news2/201008181800060AWPCH.asp

in Italian: http://new.ticinonews.ch/articolo.aspx?id=200533rubrica=14


Pascal, much appreciated. I already blogged about:
http://www.blogg.ch/index.php?/archives/833-Tages-Anzeiger-SDA-UEberwachungswahn-der-Beamten-in-Bern.html
All: Spread the word! We are going to face a referendum about this...

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Best Sales 2010!

[Fredy Kuenzler]

Am 10.08.2010 09:03, schrieb Viktor Steinmann:

IMHO the time for moderation has arrived...


Disagree. This is the first spam in the list for years. If you find at least 
three volounteers to moderate the list with guaranteed response time we can 
talk about moderation, but even then I don't think it's necessary. This list 
became rather low volume in the recent past, despite that it has today 863 
subscribers, and there is not much noise either.


F.



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Best Sales 2010!

[Fredy Kuenzler]

Am 10.08.2010 13:05, schrieb Andy Davidson:

Disagree. This is the first spam in the list for years. If you find at
least three volounteers to moderate the list with guaranteed response
time we can talk about moderation, but even then I don't think it's
necessary. This list became rather low volume in the recent past,
despite that it has today 863 subscribers, and there is not much noise
either.


Half way house. :-)  It should be possible to configure the MLM to pass
messages from subscribed members instantly, and hold posts from
unsubscribed individuals for moderation.


This is already the case. Only that 'moderation' equals 'delete everything'.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Fwd: AS 7575 announcing 2400::/12

[Fredy Kuenzler]

 Original-Nachricht 
Betreff: AS 7575 announcing 2400::/12
Datum: Fri, 4 Jun 2010 12:31:42 +1000
Von: Geoff Huston g...@apnic.net
An: nanog list na...@nanog.org, aus...@lists.ausnog.net

Hi,

As part of some ongoing collaborative research work in looking at the dark 
traffic in IPv6, APNIC has requested AARNet to originate a supernet 
advertisement of the IPv6 prefix 2400::/12 for the next two weeks. The 
originating AS is AS7575. We would appreciate it if you could adjust your 
routing filters to permit this advertisement if you are actively filtering 
IPv6 routing advertisements.


Reports from previous  work in the IPv4 space can be found at 
http://www.potaroo.net/studies/ - we hope to add to this with a report 
describing data collected about the level (and type) of background traffic 
seen in this part of IPv6.


We would also be grateful if other operational lists received this 
notification - so please forward this as appropriate (but preferably only once!)


Many thanks,

   Geoff Huston, George Michaelson
   APNIC







___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Geolocating IP's

[Fredy Kuenzler]

Am 27.04.2010 10:15, schrieb Stefan Renner:

Is anybody of you aware, how the most popular services (Google, Zattoo,
Facebook, etc) are matching geographic locations to ip-adresses ?

Our AS (41666) is located in CH, so also all the ripe objects are
registered with country-code CH.

Now we have a customer located in Germany, so I created a inetnum-block
with his subnet in ripe-db with country-code DE. This was a week ago.
The customer is still complaining that he is constantly redirected to
the swiss-versions of all the services.

Does anybody of you experienced a similar problem ? Does anybody knows
proper solution ?


At the time when I was with Zattoo (until Sept. 2008) Maxmind database was
used and was updated every few weeks. I don't think much has changed since then.

Check your IP block using the Maxmind database. I assume you need to assign
at least a /24 to a certain country, smaller blocks will probably not be
recognised.

Be patient. If the range doesn't get updated at Maxmind, write to them and
ask for assistance.

Once Maxmind is up-to-date, be patient again for a few weeks, and if Zattoo
is still not in sync, you may ask their support for help.

HTH,
Fredy


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Could please check anyone from AS3303 the propagation of 194.56.8.0/24

[Fredy Kuenzler]

Hi,

Could please check anyone from AS3303 the propagation of 194.56.8.0/24 to 
their transits (maybe you have to fix the route object?). We have customer 
complaints and see


show ip bgp 194.56.8.0
% Network not in table

and Level(3) hasn't got the prefix either:

Show Level 3 (Zurich, Switzerland) BGP routes for 194.56.8.0/24

No matching routes found for 194.56.8.0/24.

Many thanks and best regards,

Fredy Künzler
Init Seven AG


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Init7 AS13030 is leaving Equinix Zurich Exchange aka TIX

[Fredy Kuenzler]

Dear all,

Init7 AS13030 is leaving Equinix Zurich Exchange aka TIX by Thursday, Jan 7, 
2010. Please deconfigure any BGP sessions with the following IP addresses:


194.42.48.10
194.42.48.16
2001:7f8:c:8235:194:42:48:10
2001:7f8:c:8235:194:42:48:16

We continue to peer on various other exchanges such as SwissIX, DE-CIX etc. 
and are also open for private interconnects. Please see our details at 
http://as13030.peeringdb.com/ and contact peering at init7 dot net if you 
think we should peer elsewhere.


Many thanks for peering over all these years - I believe Init7 AS13030 got 
connected 1999 or 2000 to TIX Telehouse Internet Exchange. This was the time 
when a Cisco 2900 switch took all the load of the big peering switch 
fabric and the v4 routing table was as small as 6 routes.


Best regards,

Fredy Künzler
Init Seven AG
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Init7 peering

[Fredy Kuenzler]

Hi Alexandre,

Alexandre Egger schrieb:
 Could anyone responsible for the peering at Init7 (AS13030) contact me in
  directly off-list.
 
 We keep trying to reach your NOC by email with no results :(

you are on the pending request list ...

On Mon, 26 Oct 2009 14:57:26 +0100, Alexandre Egger a.eg...@neocarrier.com
wrote:
 We Neocarrier Communications LTD (AS48885 - 
 http://swissix.org/peeringdetails.php?as=48885) would like to peer with 
 you.

and yes the list is long, I'm afraid. So please be patient (it sometimes
takes years to get a peer)...

Best regards,

Fredy Künzler
Init Seven AG




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Init7 peering

[Fredy Kuenzler]

Alexandre Egger schrieb:
 This being said, here is a tip how to get faster peering:
 http://www.blogg.ch/index.php?/archives/816-Der-charmanteste-Peering-Request.html
 (not to mention, it's Fredy's log :)
 
 Would a pie help Fredy? :)

yes but only if it doesn't contain any raisins :-P

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Netzwoche

[Fredy Kuenzler]

Mateo Meier schrieb:
 Does anyone knows someone @Netzwoche ?

try desk at netzwoche dot ch

HTH
F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] [Fwd: SwiNOG #18 - please cancel your registration if you cannot attend ...]

[Fredy Kuenzler]

REMINDER - sorry for bothering :-(

We still have 15 people on the waiting list and it would be great if we 
could squeeze them all in, so please help to have a non-show rate of 0%.

Many thanks,
Fredy


 Original-Nachricht 
Betreff: [swinog] SwiNOG #18 - please cancel your registration if you cannot 
attend ...
Datum: Tue, 31 Mar 2009 16:24:03 +0200
Von: Fredy Kuenzler kuenz...@init7.net
Organisation: Init Seven AG - http://www.init7.net/
An: swi...@swinog.ch

Dear all,

SwiNOG #18 is approaching. If you happen to be registered and you're unable
to attend, please inform swinog-core at swinog dot ch NOW and vacate your
seat. We still have a waiting list of ~20 and we would like to get all of
them a chance to attend.

http://www.spale.com/cgi-bin/swinogreg

Best regards,
Fredy



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #18 - please cancel your registration if you cannot attend ...

[Fredy Kuenzler]

Dear all,

SwiNOG #18 is approaching. If you happen to be registered and you're unable 
to attend, please inform swinog-core at swinog dot ch NOW and vacate your 
seat. We still have a waiting list of ~20 and we would like to get all of 
them a chance to attend.

http://www.spale.com/cgi-bin/swinogreg

Best regards,
Fredy

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil

[Fredy Kuenzler]

Reza Kordi schrieb:
 Do you know if anybody offers a VDSL upstream with BGP dynamic routing?
 
 Customer is in ZUG city.

how evil ... serious: BGP over L2TP dial up infrastructure (yes, xDSL over
BBCS _is_ dialup) should not be implemented. We got several inquiries in the
past years and refused them all. A customer which believes to be in need of
BGP for redundancy should be able to afford a proper leased line | fibre
service.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil

[Fredy Kuenzler]

Stanislav Sinyagin schrieb:
 Fredy, if I remember it right, about a year ago you mentioned that Init7
  is deploying the ULL presence?

We considered it after doing the ULL pilot, but due to business opportunity
considerations we cancelled ULL (copper) deployments.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil? says who?

[Fredy Kuenzler]

Reza Kordi schrieb:
 Thank you all for the cool ideas and even better quotes that I received 
 today.
 
 Of course I understand that some comments were coming from those who are 
 making their profits specially on BGP interconnects.
 
 If you need BGP buy my expensive LL is the wrong idea pal.

To clarify: I don't consider BGP over xDSL a bad idea because xDSL gives
less revenue. It's purely from a technical perspective. BGP over xDSL will
flap way more often than any other connectivity. Think of 1 geeks
globally get their ASN and PI space and cannot afford proper connectivty and
get it done via xDSL - we will see a massive increase of BGP updates in the
global routing table, which requires stronger routing boxes. That's the only
reason why we don't sell it, even though we could have made quite some money
in the past.

Everybody: please don't offer BGP over DSL polluting the BGP table for CHF
20 or 40 net revenue. There are other redundancy options and backup
solutions using xDSL.

The BGP table contains today ~275k prefixes, and is still growing. Common
routers like Cisco 7206VXR cannot hold the table for ages anymore, and
filtering techniques with all the disadvantages need to be implemented.
Remember http://www.swinog.ch/meetings/swinog7/BGP_filtering-swinog.ppt - in
case you haven't experienced the old times of a 70k-BGP table.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil? says who?

[Fredy Kuenzler]

Lukas Beeler schrieb:
 On Thu, Mar 5, 2009 at 19:08, Fredy Kuenzler kuenz...@init7.net wrote:
 Remember http://www.swinog.ch/meetings/swinog7/BGP_filtering-swinog.ppt
 - in
 
 I just skimmed through that, and i wonder if it's still current.

Yes it is. Of course BOGONs are outdated, but the concept is still valid.

 There's some talk about requiring about 128MB of memory, and budget 
 concerns of smaller ISPs.
 
 Now, even expensive FB-DIMM memory by vendors like HP and IBM only costs
 around 360 CHF for 4 GB. And even small two way x86 boxes max out at
 around 32 - 48 GB. Even if Cisco and Juniper charge 10x as much, that'd
 still be only 3600 CHF.
 
 I understand that routers use ASICs and probably faster memory than 
 servers, but i can't really imagine it to be a problem to pop 4GB memory
 into a router that's connected directly to the internet.
 
 Now, where am i mistaken?

You assume that all gear can actually handle the memory, but a Cisco 3640
can only address 128MB, a Cisco7206VXR-NPE300 can address 256M - both
considered as BGP routers for smaller networks until just recently, and they
still run in many smaller networks.

Even a state-of-the-art Foundry MLX-4 is not able to handle more than 25
fullfeeds (either up or downstream) for memory limitations.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IPV6 Go (lazy providers)

[Fredy Kuenzler]

Stanislav Sinyagin schrieb:
 If you don't get extra v4 space in 1000 days, don't even consider
 to complain. You have been warned.
 
 I would very much worry, if my most important resource to maintain
 my business would dry out in less than 1000 days. That's why we
 fixed IPv6 in AS13030.
 
 Fredy, how many residential customers do you have and how many of
 them have moved to pure ipv6?

Noone moves to pure IPv6 these days. I don't consider this question serious.

Init7 carries ~60 v6 prefixes via BGP and has ~20 /48 customer
assignments, mainly to colocation and carrier ethernet customers. This
is not too much yet, but it's a start.

Regarding residentials (xDSL via BBCS) - we have an open task, and we
will deliver native v6 soon(TM) ...

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] [Fwd: Fw: [torix-members] Bill Norton's Peering papers (fwd)]

[Fredy Kuenzler]

FYI ... drpeering.net happend to be a beer idea which came up at the GPF 
4.0 in Punta Cana, Dominican Republic.

Regards,
F.


-- Forwarded Message ---
From: William F. Maton Sotomayor wma...@ryouko.imsb.nrc.ca
To: torix-memb...@torix.net
Sent: Sun, 8 Feb 2009 19:57:24 -0500 (EST)
Subject: [torix-members] Bill Norton's Peering papers (fwd)

(Forwarded from a posting I sent to OttIX members)

Hi all,

Bill Norton of NANOG and Equinix fame has put together a web site
dedicating to IX peering, complete with his famous whitepapers.  I used 
a couple of very old versions way back when to convince people at my day 
job of the value of establishing an IX, and after some searching I found 
Jake's original web page describing something called OttIX.

There have been a lot of updates to his white papers over the years and 
I'm sure everyone here will find them to be of interest:

  http://drpeering.net/index.html

Of course I'm preaching to the converted, but if anyone here encounters 
folks who have heard of Internet exchanges, IXs or exchange points and 
hesitate about connecting to any, the whitepapers might help.

Thanks,

wfms

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] PI-Range RIPE, ARIN etc?

[Fredy Kuenzler]

Silvan Michael Gebhardt schrieb:
 I suppose instead, contact the people behind the libGeoIP,
 
 http://www.maxmind.com/
 
 and afair is geoIP THE library to get the people and their
 corresponding IPs
 
 Doesn't Zattoo e.g use it?

Yes.

 Am 12.01.2009 um 15:37 schrieb nos...@linuxnet.ch
 How can this situation be solved? Is it possible to register the
 piece of the overall IP range to ARIN (and only this piece) ? 
 According to the customer it is not possible to register again 
 ip-ranges at ARIN etc. there're too many impacts in his network 
 infrastructure etc.

RIPE space is not transferable to ARIN, APNIC etc. and vice versa.

Get your RIPE entries done correctly with country information and ping
Maxmind and other GeoIP database to fix your entries.

You of course could apply for separate IP space at ARIN, APNIC etc. and 
renumber, but this is a) expensive and b) requires a lot of labor - 
probably not the favourite way to go.

HTH,
F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #17 debriefing ... and Pingsta, jittered.

[Fredy Kuenzler]

Dear all,

Thanks everybody for attending SwiNOG #17, I hope you consider it a 
successful gathering like me.

Unfortunately the people from Pingsta couldn't make it to Berne, we got 
the following email from Peter, CEO of Pingsta:

   Original-Nachricht 
  Betreff: Re: [swinog-core] SwiNOG-17 - Pingsta Team Stuck in Paris en
  Route Bern
  Datum:   Wed, 22 Oct 2008 03:05:20 -0700 (PDT)
  Von: Peter Alfred-Adekeye
 
  Dear Paschal, Fredy, Nicole  Michel,
 
  Due to circumstances beyond our control, we are stuck in Paris en
  route Bern and unless a miracle happens, we would most likely not be
  able to get to Bern on time today. As such, would it be possible to
  deliver my speech over skype video instead? If no, I guess we may
  have to reschedule the Pingsta presentation to SwiNOG 18 or 19?
 
  Once again, please accept our sincere apologies for the rather short
  notice. In the meantime, please feel free to give away the Pingsta
  T-shrts and wish the entire SwiNOG team and participants well for us.
 
  Danke
  Peter  :(
 
  Peter Alfred-Adekeye
  CEO, Pingsta

Peter: thanks for the explanation, we have been a bit surprised and 
disapointed that you couldn't make it - unfortunately your mail was read 
only after the gathering ... we enjoyed the early beer and ignored 
waiting emails ;-) ... nevermind, packets sometimes arrive with latency, 
get lost or show up jittered. The Pingsta t-shirts in fact made it right 
on time to Berne and nevertheless got distributed to the crowd ... many 
thanks!

We are happy to reserve a slot in the upcoming SwiNOG #18 in Spring 
2009, but at this time we don't have a scheduled date. Please make sure 
that you are subscribed to the SwiNOG list that you don't miss the 
announcement.

Best regards ... until SwiNOG #18!

Fredy Künzler
SwiNOG Core Team

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SwiNOG-17 (details for tomorrow)

[Fredy Kuenzler]

Steven Glogger schrieb:
 some information for SwiNOG-17:

And please: if you are registered and can't make it to Berne, please 
cancel immediately by mailing to swinog-core at swinog dot ch, to free 
your seat for those on the waitlist. All non-shows will be prosecuted in 
public! :-)

Thanks,

Fredy
SwiNOG Core team.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #16 Questionaire

[Fredy Kuenzler]

Dear all,

Please take a few minutes and fill in the 10 questions about SwiNOG #16:
http://www.surveymonkey.com/s.aspx?sm=X0yt16xSyV6I39PzlqosLQ_3d_3d

If you did not attend SwiNOG #16 (because the registration has been full 
or for any other reason), please do it also, and skip the questions 
which don't apply.


The SwiNOG-Core team would like to learn what could be done better, such 
as beer was too warm ehm ... such as location is too small and WLAN 
did not provide IPv6. Oh, it's late. This is my first surveymonky thingi.


Your answers are very valuable, so please be honest. It's completly 
anonymous unless you're leaving your name in the comment field.


Many thanks from the SwiNOG Core Team!
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] fw change on bluewin adsl accounts today?

[Fredy Kuenzler]

Schenkel Martin schrieb:
Well, the only good solution to this ugly attack is to do what Goetz 
suggested; As an ISP inbound filter the offending IP address. This is

what we did several hours ago and all is fine since then.


BTW AS44066 which propagates the offending IP address claims spoofing.

Firewalls of all type of models have/had issues with this attack. On 
some you might be able to turn on a SYN flood attack feature which 
will then blacklist the IP locally on the firewall.


Not only firewalls, I think it affects also APC remote power switches.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Anyone else lost traffic around 15:10?

[Fredy Kuenzler]

Matthias Hertzog schrieb:

Situation is back to normal again, but we saw decreased incoming
traffic here. Anyone else?


We had a ugly DDOS to a customer's network, situation is resolved now,
customer is offline ...

Sorry for the circumstances.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #16: Call for Presentations

[Fredy Kuenzler]

SwiNOG #16 is approaching ... May 14, 2008:
http://www.swinog.ch/meetings/swinog16/index.asp
If you haven't registered yet, please do it now, there are only 21 
places left.


The agenda isn't full yet, and we would like to ask fellow SwiNOG'ers to 
give a technical presentation. The community feels that in the recent 
past we've had to many vendors presenting, and we would like to change this.


So don't be shy ... even a short speech of 10 or 15 minuts would be 
appreciated. Ideas: IPv6 experience, SFlow/Netflow stuff, VPN, SIP, DDOS 
 mitigation, AntiSpam techniques, research results  ... or maybe you 
have a cool monitoring script to share?


Please submit proposals to swinog-core at swinog.

For the Core Team:
Fredy

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Zattoo is hiring: Linux Sysadmin

[Fredy Kuenzler]

Zattoo is hiring one or two Linux Sysadmins:

https://zattoo.com/jobs_biz
https://zattoo.com/images/pdfs/Linux_Sys_Admin.pdf

Kind regards,

Fredy Künzler
Zattoo Europe Ltd.
http://www.zattoo.com/

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom outage - details?

[Fredy Kuenzler]

Silvan Gebhardt schrieb:

Am 21.11.2007 um 22:51 schrieb Nik Hug:

mmh - can I see this somewhere within the internet ? I checked 
traffic-graphs from the major IXs ... also checked sans.org and so 
on - didn't see anything unusual elsewhere. Nothing on nanog.


Through this the IP+ service from Swisscom is also


you mean - good luck DDNS exist. they can make every outtage not 
our problem


I don't believe the DDOS story. Yes, some DDOS may have occurred, but
it's not the real reason.

My theory:
http://www.blogg.ch/index.php?/archives/697-Statt-Buffertainment-ein-Backbone-Domino-der-Supergau-im-Swisscom-Backbone.html

And no, I'm not feeling schadenfreude.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Customers of Telia AS1299 around ?

[Fredy Kuenzler]

Pascal Gloor schrieb:

Could you check if you see any prefix  on this path ? ^1299_15600


works (of course we prefer the direct peering via SwissIX):

#sh ip bgp regexp ^1299_15600_

   Network  Next Hop   Metric LocPrf Weight Path
*  62.204.96.0/19   213.248.96.45  90 50  0 1299 15600 i
*  77.239.32.0/19   213.248.96.45  90 50  0 1299 15600 i
*  81.18.16.0/20213.248.96.45  90 50  0 1299 15600 i
*  89.236.128.0/18  213.248.96.45  90 50  0 1299 15600 i
*  193.5.124.0  213.248.96.45  90 50  0 1299 15600 i
*  193.8.165.0  213.248.96.45  90 50  0 1299 15600 i
*  193.8.166.0  213.248.96.45  90 50  0 1299 15600 i
*  193.135.44.0 213.248.96.45  90 50  0 1299 15600 i
*  193.218.104.0213.248.96.45  90 50  0 1299 15600 i
*  194.209.56.0 213.248.96.45  90 50  0 1299 15600 i
*  194.230.57.0 213.248.96.45  90 50  0 1299 15600 i
*  195.65.217.0 213.248.96.45  90 50  0 1299 15600 i
*  212.60.32.0/19   213.248.96.45  90 50  0 1299 15600 i
*  212.243.163.0213.248.96.45  90 50  0 1299 15600 i
*  213.142.160.0/19 213.248.96.45  90 50  0 1299 15600 i
*  213.221.192.0/18 213.248.96.45  90 50  0 1299 15600 i



F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] anyone from COLT AS8220 here?

[Fredy Kuenzler]

Please contact me offlist. I couldn't get hold of anyone at #ix or 
#swinog, unfortunately.


It's a GeoIP issue we would like to resolve and concerns 217.110.0.0/15.

Thanks,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Webalizer ASN extension update (v1.3b)

[Fredy Kuenzler]

FYI we released a new version of the Webalizer ASN extension (v1.3b). 
It's now compatible with Debian Etch.


http://www.init7.net/webalizer_asn/

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Zattoo is hiring a Sysadmin

[Fredy Kuenzler]

Zattoo is hiring a Sysadmin, to work in my team in Zuerich-Oerlikon:
http://zattoo.com/jobs_biz

Regards,
Fredy

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] BGP hint required

[Fredy Kuenzler]

I'm building the CDN for Zattoo and as it's some sort of 'anycast' 
infrastructure (refer to the presentation @ SwiNOG #14), I have several 
geographically dispersed network islands, not connected via a layer-2 link.


Each network island propagates one or more /24 networks, using AS8302.

Now, BGP mechanism prevents AS-pathes like

^[Transit-AS]_8302$

in my case

^13030_8302$

if I'm AS8302 myself.

I know there is some tweak to prevent this default behaviour. Could 
anyone give a hint for Foundry and Cisco gear?


Thanks,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP hint required

[Fredy Kuenzler]

Michael Horn schrieb:

Now, BGP mechanism prevents AS-pathes like

^[Transit-AS]_8302$

in my case

^13030_8302$

if I'm AS8302 myself.

I know there is some tweak to prevent this default behaviour. Could
anyone give a hint for Foundry and Cisco gear?


you may want to use the allowas-in statement in the neighbor 
configuration (at least on cisco)


  allowas-in Accept as-path with my AS present in it

- neighbor 1.2.3.4 allowas-in


Thanks Michael and Ueli, who pointed me to the same command. This in 
fact fixes the issue, at least on Cisco.


No I have to find the similar command on Foundry.

Best regards,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom wants CHF 31/Month per regulated copper line

[Fredy Kuenzler]

Andre Oppermann schrieb:
The price seems to be a bit far out when considering that a normal 
phone line (which includes the telephony infrastructure as well) 
costs only CHF 25.25/Month. Reading the financial reports of Swisscom

 from the last few years it doesn't seem Swisscom was losing any
money on the phone lines even when excluding any traffic minute
charges.

http://www.swisscom.com/GHQ/content/Media/Medienmitteilungen/2007/20070320_01_Revidiertes_Fernmeldegesetz.htm

Yet more work for BAKOM, Comcom and the Bundesgericht in the next 
years.


It's an insolence. Schloter and Dietiker are breaking their promise. See
http://www.blogg.ch/index.php?/archives/633-ULL-Teilnehmeranschlussleitung-TAL-soll-CHF-31.00-kosten,-sagt-Swisscom.html

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Beer-Event-Year 2007 in Zurich

[Fredy Kuenzler]

Markus Wild schrieb:
please avoid all dates with scheduled swiss-date-show on local tv 
stations  - as you know some of us may not attend then ;-)


I start to get the distinct impression that Nik is actually
jealous...

Someone want to enter Nik into the show? ;)


I don't think Sophie will like that :-P

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #13 (2nd) Call for presentations

[Fredy Kuenzler]

Dear all,

If you have a topic to share on SwiNOG #13, please propose it to 
swinog-core at swinog.ch, thanks.


Reminder: SwiNOG #13 date: Nov 1st, 2006, same place :-)

Registration will follow in appx. 2 weeks.

Regards,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Sunrise network issues?

[Fredy Kuenzler]

Anyone else with problems to reach the Sunrise backbone?

We saw an high latency between Verizon Business (702) and Sunrise and 
after rerouting via Telia (1299) the latency remained between in the 
Level3 (3356) Backbone.


TTL  LFT trace to business.sunrise.ch (195.141.106.101):80/tcp
 1   [AS13030] r4.core.init7.net (213.144.129.65) 3.1ms
 2   [AS13030] r7.core.init7.net (213.144.128.7) 6.3ms
 3   [AS1299] zch-b1-link.telia.net (213.248.96.45) 6.5ms
 4   [AS1299] ffm-bb1-link.telia.net (213.248.65.41) 12.1ms
 5   [AS1299] ffm-b2-link.telia.net (80.91.249.194) 14.5ms
 6   [AS3356] ge-6-13.car2.Frankfurt1.Level3.net (4.68.111.101) 14.6ms
 7   [AS3356] ae-0-53.bbr1.Frankfurt1.Level3.net (4.68.118.65) 
3398.5/3402.7ms
 8   [AS3356] so-1-0-0.mpls2.Geneva1.Level3.net (212.187.128.245) 
3406.1/3414.9ms
 9   [AS3356] so-10-0.hsa2.Geneva1.Level3.net (4.68.125.182) 
3410.9/3408.9ms

10   [AS3356] 213.242.73.150 3385.8/3408.4ms
11   [AS6730] 195.141.35.3 3395.9/3403.3ms
12   [AS6730] gi0-1.ber08d01.sunrise.ch (195.141.225.222) 3391.5/3389.5ms
13   * [AS6730] 195.141.3.14 3387.2ms
14   [AS6730] [target] business.sunrise.ch (195.141.106.101):80 3381.2ms

Any explanation?

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cablecom / aorta.net issue (was: Sunrise network issues?)

[Fredy Kuenzler]

Nik Hug schrieb:

cablecom nervt:

zu init7 komme ich momentan gar nicht durch ...

marzili:~# traceroute www.init7.net



traceroute to www.init7.net (82.197.165.66), 30 hops max, 38 byte
packets
1  192.168.1.1 (192.168.1.1)  2.699 ms  1.571 ms  1.565 ms
2  10.163.128.1 (10.163.128.1)  9.572 ms  11.617 ms  10.895 ms
3  * * *
4  * * *
5  nl-ams01a-rd1-ge-4-1.aorta.net (213.46.160.25)  40.022 ms  41.455
 ms  41.158 ms
6  fr-par03a-rd1-ge-4-0.aorta.net (213.46.163.82)  40.285 ms  41.913
 ms  46.195 ms
7  fr-par03a-ra1-ge-0-0-0_0.aorta.net (213.46.163.90)  40.701 ms * *

super-sach mit aorta.net!


The current routing policy of 8404 is questionable. The seem to prefer
any route over 6830, even though they learn them directly over peering.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SwiNOG #13 - save the date

[Fredy Kuenzler]

Andre Chapuis schrieb:

Remember Nov. 1st is free in some Cantons (Toussaint / Allerheiligen)


We have been aware of this, however, the location (Altes Tramdepot) gave 
not much choice.


F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #13 - save the date

[Fredy Kuenzler]

Dear all,

SwiNOG #13 is approaching - Wednesday, Nov 1st, 2006. Same place - 
http://www.altestramdepot.ch/


Please save the date.

Main Sponsor:
http://www.agilent.com/

Infos and registration will follow.

Please consider giving a presentation - send suggestions to 
[EMAIL PROTECTED] - thanks.


For the Core Team,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SDSL

[Fredy Kuenzler]

Xaver Aerni schrieb:

I think the Traffic is a bigger Problem... I must make a line from a
little Kaff to a littlerer Kaff (wo sich Hase und Fuchs gute
Nacht wünschen...) The distance is on air 12 km... on Cable is i
think till 10 times more...

This is the Problem... On this distance I'm happy when I have the
normal 1.8 mb on SDSL or 4 MB on Swisslink Data... The 3. way if
Fredy has a 10 MB Line on this Käffer...


I can't find Kaff on my map. Is this really the correct spelling?

Please fill in the form here http://www.init7.net/ethernet-access.php
and we'll see what we can do.

Regards,
F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Preventive blocking

[Fredy Kuenzler]

Michel Renfer schrieb:
There were a few approches until now, already with low success or 
technical implications (other sites also blocked, etc.)


The discussion now happend on society level. Any bigger ISP will 
never offically reject such blocking requests for child pornography 
in a tv interview as this can hardly hit their image in the public.


The technical questions of the blocking are completly fadet out. They
didn't really care anyone. Blocking can and will definitivly not
work. Endusers can implement workarrounds in less than a minute.
Other questions like, who's maintaining the list etc. are not even
discussed.

I'm really concerned about the way that this story will/ can go...


Full Ack. After this letter arrived, I wrote a blog entry:
http://www.blogg.ch/index.php?/archives/444-Kampagne-Stopp-Kinderpornografie-im-Internet!-Das-Ross-wird-am-Schwanz-aufgezaeumt.html

Few days later I got a call from the journalist of SF who did the report
in 10vor10. Means: the journalist was perfectly aware of all the
technical and political issues in this case, but he masked out it
completly. IMHO a bad job, 10vor10.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] *SPECIAL* SwiNOG-BE40 - BBQ/Beer Event 40 - 7th of August @ Oerlikerpark Block this subject

[Fredy Kuenzler]

Glogger Steven schrieb:

this could be:
- beer


Init7 will provide some beer.


problems (!!!):
---
there is NO public toilet in the near. so please consider this before
leaving for the BE ,-) there might be some toilets walking some 
minutes around ;-)


We can provide also beer disposal :-) Toilet is appx. 7min walk away.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] isp evaluation in Shanghai

[Fredy Kuenzler]

Frédéric Jutzet schrieb:

Any personal experience, top-x report, to select a good ISP
(broadband with business services, or only business product) in
Shanghai ?


TIC ;-P
http://www.tic.ch/de/produkte/china.php

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] [Fwd: [local-ir]Announcement RIPE NCC LIR Training Courses]

[Fredy Kuenzler]

Please note there is one (rather rare) course in Zurich planned.

F.

 Original-Nachricht 
Betreff: [local-ir]Announcement RIPE NCC LIR Training Courses
Datum: Tue, 09 May 2006 14:32:12 +0200
Von: RIPE NCC Training Services [EMAIL PROTECTED]
An: [EMAIL PROTECTED]


Dear Colleagues

The RIPE NCC Training Services Department invites you to register for 
one of our upcoming LIR Training Courses:



 Date:  Friday 2 June 2006
 Time:  0900 - 1700
 Location:  Almaty, Kazakhstan
AND:
 Date:  Friday 9 June 2006
 Time:  0900 - 1700
 Location:  Rome, Italy
AND:
 Date:  Monday 12 June 2006
 Time:  0900 - 1700
 Location:  Riyadh, Saudi Arabia
 Hosted by: ZAJIL International Telecommunications Co. 
W.L.L.

AND:
 Date:  Friday 16 June 2006
 Time:  0900 - 1700
 Location:  Paris, France
AND:
 Date:  Friday 30 June 2006
 Time:  0900 - 1700
 Location:  Tallinn, Estonia

AND:
 Date:  Friday 14 July 2006
 Time:  0900 - 1700
 Location:  Amsterdam, Netherlands

AND:
 Date:  Friday 14 July 2006
 Time:  0900 - 1700
 Location:  Munich, Germany

AND:
 Date:  Friday 21 July 2006
 Time:  0900 - 1700
 Location:  Stockholm, Sweden

AND:
 Date:  Friday 28 July 2006
 Time:  0900 - 1700
 Location:  Prague, Czech Republic

AND:
 Date:  Thursday 3 August 2006
 Time:  0900 - 1700
 Location:  Warsaw, Poland

AND:
 Date:  Friday 11 August 2006
 Time:  0900 - 1700
 Location:  Dublin, Ireland

AND:
 Date:  Friday 18 August 2006
 Time:  0900 - 1700
 Location:  Zurich, Switzerland

AND:
 Date:  Friday 25 August 2006
 Time:  0900 - 1700
 Location:  Belgrade, Serbia and Montenegro

AND:
 Date:  Friday 1 September 2006
 Time:  0900 - 1700
 Location:  Lisbon, Portugal

AND:
 Date:  Thursday 7 September 2006
 Time:  0900 - 1700
 Location:  Manchester, United Kingdom

AND:
 Date:  Friday 15 September 2006
 Time:  0900 - 1700
 Location:  St. Petersburg, Russian Federation

AND:
 Date:  Friday 22 September 2006
 Time:  0900 - 1700
 Location:  Vienna, Austria

AND:
 Date:  Thursday 28 September 2006
 Time:  0900 - 1700
 Location:  Amsterdam, Netherlands


The LIR Training Course explains the role of a Local Internet Registry 
(LIR) in the distribution of IP resources and development of policies. 
We also introduce attendees to the newest policies and procedures, 
explain terminology, and show how to efficiently communicate with us.


The course is free of charge. We provide lunch and printed training 
materials. We do not cover any of your travel expenses or accommodation.


We give all of our training courses in English.

You can find more information about the course at:

http://www.ripe.net/training/lir/

How to register:
-

The target audience of the LIR Training Course is employees of new LIRs,
and new staff from established LIRs, who will deal with us as part of 
their regular work.


You can register up to two people from your LIR for each course.
(If there are places left nearer the time of the course, you can 
register more people).


As we give out confidential information to attendees about their own LIR,
only 'LIR contact persons' can register themselves for a course.
LIR contact persons can also register other colleagues.

To register for this course, you can either use the LIR Portal at:

https://lirportal.ripe.net/lirportal/training/course-list.html
Or the online registration form on our website:

http://www.ripe.net/cgi-bin/trainingform.pl.cgi

If you have any questions, send an e-mail to [EMAIL PROTECTED].

Kind regards,


Rumy Kanis
Training Services Manager
RIPE NCC

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #12: make a note into your agenda

[Fredy Kuenzler]

Dear all,

SwiNOG #12 is about to approach: Thursday, May 4th, same time, same place!

Please send presentation proposals to [EMAIL PROTECTED] :-)

Regards,
The SwiNOG Core team
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] [Fwd: Robert Depenbrock / AS12399]

[Fredy Kuenzler]

 Original-Nachricht 
Betreff: Robert Depenbrock / AS12399
Datum: Wed, 15 Mar 2006 14:25:26 +0100
Von: Dominik Bay [EMAIL PROTECTED]
An: [EMAIL PROTECTED]

Liebe Listen-Leser und Leserinnen,

gerade erreichte uns die Nachricht, das unser Kollege und Freund
Robert Depenbrock verstorben ist.
Im laufe der Jahre war er nicht nur Kollege, sondern auch Freund und
fuer viele angenehme Stunden bekannt, ob es nun in einer stressigen 
Phase oder bei einem After-Work zusammensitzen war, er hat versucht

immer gute Laune zu verbreiten. Seine Kompetenz und Kraft brachte er
auch in viele Open-Source Projekte ein und war immer da, wenn man in 
brauchte.


Unser tiefes Mitgefuehl gilt seiner Familie und Angehoerigen.

Er wird uns sehr fehlen.

--
 Dominik Bay







PGP.sig
Description: PGP signature
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cablecom Routing/Peering changes?

[Fredy Kuenzler]

Glogger Steven schrieb:

problem is fixed. tix-2 was on speed auto/duplex auto. it's now fixed
by ix europe - looks now good ,-)


This would explain the mentioned peering problem between Cablecom and
Init7. We recently moved traffic from Init7 to Cablecom over TIX-2.

Regards,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cablecom Routing/Peering changes?

[Fredy Kuenzler]

Glogger Steven schrieb:

problem is fixed.
tix-2 was on speed auto/duplex auto.


BTW this is a common issue. If you happen to run some Cisco 29xx|35xx 
switches, check duplex problems with entering


#sh int | inc CRC

or

#sh int | inc error

if it shows more than just a couple of errors, then you most likely have 
a duplex / speed mismatch.


Rule of thumb:
- Cisco Switch - any Switch: usually set to Speed 100 / Full Duplex
- Cisco Switch - Cisco Router: always set both sides to Speed 100 / Full 
Duplex

- Cisco Switch - Host: usually better to use Speed auto / Duplex auto

So don't be surprised if you have bad performance with Duplex mismatch. 
Another possibility is to check the LED status of the Ciscos - if you 
see yellow blinking (instead of green), then something is wrong.


HTH
F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog