[swinog] Re: Swisscom DNS issue: spectrum-conference.org wrongfully resolves to a bluewin address in swisscom mobile networks

t can not be loaded due to certificate mismatch? The world is no longer HTTP-only... > But do you have a better solution? Since this is not a "solution", just a new sort of problem, it doesn't even qualify for a comparison. Gert Doering -- NetMaster -- have you enabled IPv6

Re: [swinog] Coop.ch geoblocking?

control", I'd strongly recommend against using that in 2021... (https://www.heise.de/security/artikel/Der-Todesstoss-fuer-PPTP-1701365.html - this was 2012) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian

Re: [swinog] Swisscom IPv6 Routing weirdness

eful work. *tcpdump* does not know. All tcpdump can see is "I see a packet handed towards the NIC, and the checksum does not match" - which is reported. Tcpdump does not see how the packet will end up on the wire. Gert Doering -- NetMaster -- have you ena

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

en your whole mail server is blocked. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

or your server was listed, or...) changes *their* SPF stuff, making *your* MTA noncompliant. Is this an error? Yes, surely. Is the MTA operator to blaim for it? Possibly sometimes, but certainly not "always, and solely". Gert Doering -- NetMaster -- have you enabled IPv6

Re: [swinog] Looking for a VoLTE-SIP gateway

if I read such. So - if someone from beroNet has interest in working on that, feel free to contact me. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger

Re: [swinog] SafeHost AS21217 accused to leak routes for two hours to China Telecom AS4134 - anyone from SafeHost to comment?

ave we? Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenc

Re: [swinog] are you also seeing more ssh attacks ?

+ LinOTP tokens), if only to keep the noice in the logs down and to annoy the brute-forcers a bit :-) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14A

Re: [swinog] RIPE database and more specific routes

*Some* upstreams might be libral and accept everything up to a /24 from the blocks you define, but others are very strict. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger-Bo

Re: [swinog] background migration of swisscom connection from IPv4 native to v6 + DS-Lite

have unmodified old IPv4 to ensure compatibility during the transition, and then you turn it off (in 10 years or so). Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14

Re: [swinog] background migration of swisscom connection from IPv4 native to v6 + DS-Lite

excuses to avoid deploying IPv6, while at the same time blaming everyone else for the problems with IPv4. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsra

Re: [swinog] background migration of swisscom connection from IPv4 native to v6 + DS-Lite

RE > such a change. > > To implement CGN without making sure the customer gets a notice was simply > the root of the problem Yeah, it's quite unfortunate that IPv4 ran out so suddenly, barely 15 years after people were told to move towards IPv6. Gert Doering -- NetMaster -- have

Re: [swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

quot;the other way round" by using the "out of country" and "out of continent" blackhole communities offered by NTT - so the customer under attack would be announced as a "faraway RTBH" route - but this isn't good enough yet either, as not all transits offer this.

Re: [swinog] Swiss ISPs and IPv6 --- 2016 edition

re money by selling multi-stage NAT boxes and consulting services to go with it"! Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors

Re: [swinog] Swiss ISPs and IPv6 --- 2016 edition

Hi, On Thu, Sep 15, 2016 at 12:11:44PM +0200, Jeroen Massar wrote: > Oh and note: Dual-stack IPv4 + IPv6, along with a /56 per user. What do you want this IPv4 stuff for? That's even, like, 40+ years old. gert -- have you enabled IPv6 on something today...? SpaceNet AG

Re: [swinog] peering request

Why don't they have IPv6? (btw, it's not "6to4" but "proto-41" - 6to4 is the 2002:xx:xx: stuff for automatic tunneling windows likes to use, and you really do not want do BGP across that) Gert Doering -- NetMaster -- have you enabled IPv6 on som

Re: [swinog] mobile providers with IPv6 in switzerland?

t; Voice over LTE has been using an IPv6-only APN since its launch last year. This is good :-) - but not very visible on the outside, so content providers can still lean back and defer their IPv6 implementation, pointing to the mobile operators "see, even if we did v6, nobody woul

[swinog] mobile providers with IPv6 in switzerland?

like T-Mobile DE), and whether it's default-on for anything yet... thanks :-) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner

Re: [swinog] PPTP over Swisscom DSL centro grande

his. I'd recommend going from PPTP VPN to OpenVPN - it is much more robust to mistreatment by NATs, and more secure as well. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger

Re: [swinog] RFC1918 IP's im Internet-Trace outbound - eine Unsitte - oder liege ich falsch ?

Hi, On Fri, Mar 06, 2015 at 08:02:43AM +0100, Stephan Wolf wrote: Ist das meine best practice, KEINE RFC1918 IPs im Internet zu verwenden, So steht es im nämlichen RFC. Keine Pakete mit diesen Sourcen rauslassen. Gert Doering -- NetMaster -- have you enabled IPv6 on something today

[swinog] technischen Kontakt bei swisssign.net gesucht

-Auflösung von crl.swisssign.net geht nimmer - und selbst wenn sie ginge, geht natürlich der CRL-Zugriff dann auch nimmer). Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AGVorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14