Re: [swinog] How to get around bluewin's mail restrictions

Hi that's why noone really using SPF. http://spftools.infinitepenguins.net/earlyadopters.php .. btw, not only bluewin is doing this, others will follow.. so be prepared. Keep in mind that SA3 has built-in support for SPF. Daniel ___ swinog mailing list

Re: [swinog] How to get around bluewin's mail restrictions

Hi I'm not really a friend of that SPF stuff, but i'm much less a friend of the bluewin restrictions. Is there any other way to get out of this Zwickmühle without removing our SPF records (or adding mail.bluewin.ch to them)? Your SPF records states -all, Bluewin behaves correctly. Use SMTP Auth

Re: [swinog] FOTD -- Fun of the day

Pascal Gloor wrote: http://www.sco.com just in case it gets reverted to normal: http://daniel.lorch.cc/files/sco-hack.png Daniel ___ swinog mailing list [EMAIL PROTECTED] http://lists.init7.net/cgi-bin/mailman/listinfo/swinog

Re: [swinog] makelovenotspam.com

Hi [x] weapon (choose which suits you best)? Suppose I'd be a black hat. I would register a domain and perform massive spamming - making sure I'm really getting noticed. Lycos now blacklists this domain, targeting their Screensaver-DoS-Zombies to that site. I'd just point my A-records to the

Re: [swinog] makelovenotspam.com

Fredy Kuenzler wrote: Big topic at Nanog, anyone already debugged IP flow of the new No need to debug, the website explains it all: 1. The screensaver sends a request to view a SPAM source site (it's only a request, so you won't actually see the page). 2. The request is then sent to a

Re: [swinog] New meaning of Networking

Hi Thanks, I'd better continue using http://www.10787.ch/index2.php Why not http://www.skype.com/products/skypeout/ ? what's all this fuss about? VoIP isn't somehting extremely cheap, as it never was... You get a portable fixnet number. Take your VoIP-device anywhere you want, plug it into the

Re: [swinog] New meaning of Networking

Hi it's just my own opinion, maybe I'm wrong and there's a broad market for Internet-telephony. I'm just doubting by nature. Ok lets try another real-world example: You have an internet connection via cable and you don't want to pay the 25.25 monthly fee to Swi$$com for your telephone number

Re: [swinog] New meaning of Networking

Hi Cablecom charges CHF 20, I don't see much difference here. Econophone charges 9.90, freenet.de and skype out offer 'prepaid' services without base charge. Daniel ___ swinog mailing list [EMAIL PROTECTED]

Re: [swinog] New meaning of Networking

Hi Besides, a serious telephony provider needs a telephone switch, which is of order of half a million CHF one-time investment. Plus it needs a decent billing system, another few hundred francs. It has also to re-engineer its transport network to enable QoS along the whole way of VoIP packets.

Re: [swinog] open bgpd released

On Tuesday 09 November 2004 12:13, Simon Brown wrote: http://www.openbgpd.org/ As seen on Sucon '04 and Swinog #9 http://bulabula.org/papers/sucon04/bgpd/ Daniel ___ swinog mailing list [EMAIL PROTECTED]

Re: [swinog] INOC-DBA Telephone book

Hi INOC DBA = Internet NOC Dial-by-ASNumber, i.e. you dial e.g. 3303 and it should ring on my desk... http://www.pch.net/inoc-dba/ Forbidden You don't have permission to access /inoc-dba/ on this server. Apache/1.3.26 Server at www.pch.net Port 80 Daniel

Re: [swinog] Is Billag the next one following this idea...?

Hi What if you buy your pc in parts ? Maybe they will make a table with quota of % that your CPU or memory represents in the total fee :) H ? :) The emphasis is on _internet capable_ PC. So if you have internet connectivity at home I guess that qualifies you as someone who needs to pay the

Re: [swinog] Reply-to: header [was: Re: WAN link provider]

Hi It only generates confusion and embarrassment, and I think we should be able to rely on people being able to use their mailer's reply to all feature when they want to write followups. 1000% ACK ... Don't patronise us! -1 (I'm lazy, I like it this way) Daniel

Re: [swinog] Swinog mailing list

Hi Who maintain the swinog mailing list ? Please contact me (this is not urgent). well .. lets see: swinog mailing list [EMAIL PROTECTED] http://lists.init7.net/cgi-bin/mailman/listinfo/swinog ^ Daniel ___ swinog mailing list

Re: [swinog] Terminalservice recommondations

Hi Which requirements in special? Which OS? What do you mean by '4 ports'? Sorry, either I understand you wrong or you should be more precise. Terminal Servers usually provide RS-232 connectors, which is also known as COM-port or serial port. I bought a 8 Port RS-232 Card from arp-datacon.ch

Re: [swinog] INOC-DBA stupid question

Manuel Wenger wrote: I haven't ordered a Cisco phone, but I'd like to register with INOC-DBA using a softphone (like Xlite). The stupid question is: how? :-) I mean, where do I get an account with username and password to log on to the SIP registrar server? If we're at it: who knows about

Re: [swinog] Beer event - Romandie

Marcel Prisi wrote: Would be nice ! Where are you all located ? I am in Aubonne (between Morges and Rolle). I will be in Lausanne starting mid-September. I don't speak very well french, though :) Daniel ___ swinog mailing list [EMAIL PROTECTED]

[swinog] Job opening @ Hostpoint

these problems, as they reflect many of the situations we are facing day to day. [1] http://marc.theaimsgroup.com/?l=nanogm=106844931120202w=2 -- Kind Regards Daniel Lorch He who soon doesn't contribute to this country's BSP anymore Hostpoint GmbH| The Data Residence| Zürcherstrasse 2

Re: [swinog] Job opening @ Hostpoint

Hi I really wonder how many people will send their pgp key instead. Could you publish this number once you got all applications? I will post some stories as soon as I have something funny to tell. So far, everyone has correctly sent me their public ssh key. In total we have 0 applicants, but 7

Re: [swinog] Fwd: Kaspersky Labs says Electronic Jihad on the Internet quite possible tomorrow

Hi The Russian news agency, Novosti, has reported Kaspersky Labs has warned about a large-scale virus attack on the Internet that might be delivered by Islamic terrorists on August 26. Let's wait and see whether we get a cool RRD graph from this: http://www.hostpoint.ch/tmp/mailstats_week.png

Re: [swinog] Huge list lag...

Hi well was wondering too, but maybe a good feature to prevent to much and fast mailflow about hot themes like SPF ;-) Mail-Traffic-shaping for free! I'm using SPF-40 now (Sun Protection Factor 40), as advised by Stony :) And at least: a big thank you for fredy to support the community

Re: [swinog] Implementing SPF

Regards Daniel Lorch Full-time SPF evangelist Hostpoint GmbH        | The Data Residence    | Zürcherstrasse 2      | 8640 Rapperswil       | Schweiz Tel  +41 55 220 0404  | Fax  +41 55 220 0409  | www.hostpoint.ch ___ swinog mailing list [EMAIL

Re: [swinog] Implementing SPF

header for the Envelope From so SA can parse that value: http://spamassassin.apache.org/doc/Mail_SpamAssassin_Conf.html#item_envelope_sender_header_name_2dof_2dheader -- Kind Regards Daniel Lorch Full-time SPF evangelist Hostpoint GmbH| The Data Residence | Zrcherstrasse 2 | 8640

Re: [swinog] Implementing SPF

registering our 21k+ .ch domains, not com/net/org :) Only want to push the .ch TLD on this stats. I'm expecting my registering script to be finished at about 4 pm. Right now we reached m. 13 more letters to go. -- Kind Regards Daniel Lorch Positive Feedback Cycle Engineer Hostpoint GmbH

Re: [swinog] Implementing SPF

adopted, the more sense it will make to support it. Or do you know of any other technology which would allow you to do what SPF does? Use your imagination - tell customers they can protect their domains from abuse when they enable SPF. That's another selling point! -- Kind Regards Daniel

Re: [swinog] Implementing SPF

... You're also an access provider, we're a hosting-only provider. Different scenarios :) -- Kind Regards Daniel Lorch Positive Feedback Cycle Engineer Hostpoint GmbH        | The Data Residence    | Zürcherstrasse 2      | 8640 Rapperswil       | Schweiz Tel  +41 55 220 0404  | Fax  +41 55 220

Re: [swinog] Implementing SPF

the customers domain from being abused as sender address? In many cases it will. Consider virii sending mails with forged domain names. -- Kind Regards Daniel Lorch Still Not Giving Up Hostpoint GmbH        | The Data Residence    | Zürcherstrasse 2      | 8640 Rapperswil       | Schweiz Tel  +41

Re: [swinog] Implementing SPF

Hi If the owner of the domain swinog.ch (only as example) [..] Just as a sidenote: As per RFC2606 you're encouraged to use example.net, example.org or example.com in these kind of situations: http://www.rfc-editor.org/rfc/rfc2606.txt Daniel ___

[swinog] Implementing SPF

on SPF is available here (see Find out more about SPF for: .. Sysadmins): http://spf.pobox.com/ Here's a wizard to generate SPF records: http://spf.pobox.com/wizard.html -- Kind Regards Daniel Lorch Full-time SPF evangelist Hostpoint GmbH        | The Data Residence    | Zürcherstrasse

Re: [swinog] Implementing SPF

9, but manually adding domains is quite a tedious task). As soon as they provide me with a bulk add, we'll get it to rank #1! -- Kind Regards Daniel Lorch Full-time SPF evangelist Hostpoint GmbH        | The Data Residence    | Zürcherstrasse 2      | 8640 Rapperswil       | Schweiz Tel

Re: [swinog] Squid problem

Hi No matter if I use internet exploer or Netscape Navi Give him a proper FTP Client. I that problem known? It's called the DAU syndrome. Daniel ___ swinog mailing list [EMAIL PROTECTED] http://lists.init7.net/cgi-bin/mailman/listinfo/swinog

Re: [swinog] The Cidr Report

Andre Oppermann wrote: Can you stop this please? Anyone who is interested can either read it on one of the other lists you post this to, or on the web. We have managed to live four years without the report on this list and I think we can continue living without it. Thank you. +0 on this (I

[swinog] [Fwd: [grsec] Important Announcement Regarding the grsecurity Project]

Hi This is not exactly 'on topic', but I know there are quite a few people using grsec so I thought this would be of general interest. The development of grsec has, unfortunately, ceased due to lack of funding. Paypal, anyone? :) In another posting Brad mentions how much funding he approximately

Re: [swinog] dns issue at bluewin ?

Hi $ for i in 1 2 3 4; do echo -e \n** trying ns$i.bluewin.ch\n; host www.bluewin.ch ns$i.bluewin.ch; done it's DNS not NS. sorry! Daniel ___ swinog mailing list [EMAIL PROTECTED] http://lists.init7.net/cgi-bin/mailman/listinfo/swinog

Re: [swinog] dns issue at bluewin ?

Roger Schmid wrote: is someone from bluewin reading this list ? there seems to be a problem with the www entry of bluewin.ch since yesterday morning this seems to match with the last mod. serial = 2004060201 $ for i in 1 2 3 4; do echo -e \n** trying ns$i.bluewin.ch\n; host

Re: [swinog] ISP's share Anti-Spam rules ?

Hi Maybe it could be a full/half-time job for one, which will be fully or partially paid by all participating ISP/company which using then this service ? No one has defined 'it' clearly. Some are talking about a spamcop-like RBL (but less sucky), others about a mailinglist and then there are

Re: [swinog] ISP's share Anti-Spam rules ?

Hi For the first start, I can implement and run this RBL here at Improware. Distribution can be done with rsync. There are currently no additional costs since we need to implement it anyway for the Cable providers who use our Mail-Services. What zone file/format are you using? BIND? djbdns? Daniel

Re: [swinog] ISP's share Anti-Spam rules ?

Hi Thomas Vogt from SolNet made the suggestion that some swiss ISP's could share their spamassasin Rules to provide better filtering. I think this is a good idea. Definately interested. Is there a reason you can't make them avail- able to the upstream authors of SA? There are language-specific

Re: [swinog] Geo-Coordinates of Interxion Glattbrugg

Hi Here you are ... ghayda.glb.as8758.net. 345600 IN LOC 47 25 57.500 N 8 33 26.100 E 429.00m 30m 40m 5m thanks! Daniel ___ swinog mailing list [EMAIL PROTECTED] http://lists.init7.net/cgi-bin/mailman/listinfo/swinog

Re: [swinog] LPI Certification - worth anything?

] Mail-Followup-To: Folken [EMAIL PROTECTED], [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] User-Agent: Mutt/1.5.6i On Fri, Apr 23, 2004 at 11:11:57AM +0200, Beat Rubischon wrote: Am 23.04.04 schrieb Daniel Lorch: So the crucial questions are (please answer honestly): 1. Did you know

Re: [swinog] LPI Certification - worth anything?

Hi * I agree on that and I am pretty sure there are some teachers around (or at least there were in Zuerich) which know OOP. I actually know one of the guys who wrote the basic script for the Java and OOP classes which are on the roadmap. [..] One of the most renowned OO experts teaches as a

Re: [swinog] ns1.ip-plus.net

Hi what'll you do? How do you get the right nameservers or is it time to write dnsquery after auth? You don't need to worry about that. Whoever sets up the DHCP server has to ensure he gives you a working DNS resolver. Alternative solution? Install a local dns resolver:

[swinog] DCC Greylisting

Hi http://www.rhyolite.com/anti-spam/dcc/greylist.html Opinions? How do I get this working with qmail? :) To summarize greylisting: For trusted hosts, the mailserver will operate normally. For untrusted hosts, the mailserver will _temporarily reject_ the mail. Every standards compliant MTA will

Re: [swinog] Cablecom customer spammin again

Hi Sorry, I can't agree. When enforcing port 25 forwarding to the ISP SMTP relay for high volume end users and free dial-up a reasonable part of this can be easily automated. And each ISP _can_ afford this. Simple and effective. You probably first want to consider the question of who is

Re: [swinog] Cablecom customer spammin again

Hi I week ago I receive a spam from a Cablecom custommer with the name AW: Votre demande Nimag Networks Sàrl for a Testeur d'alcohol sended trough smtp.hi-speed.ch. I have do a spam report immediately. I guess they are understaffed. Don't expect a reaction. On nanog there was recently a

Re: [swinog] Cablecom customer spammin again

Hi But it proofs your social responsibility against the Internet community - and finally saves cash for every ISP. It's not gonna save any money. The protocols are broken. Period. Until someone comes up with a real fix, running after all YAUPs (yet another useless patch) is just a waste of time

Re: [swinog] Migration to Open Source SW

Hi I'm starting to work on a master thesis titled Challenges and Risks of OSS-Migration Projects. Therefore, I'm looking for persons/companies who have done a migration to Open Source Software (OSS).[..] Note that the 'correct' acronym is FOSS (Free and Open Source Software). OSS is an acronym

[swinog] Virtual MDA

Hi hey, that's much cooler than [EMAIL PROTECTED] Get paid 1$/h to run their client! http://www.virtualmda.com/ http://yro.slashdot.org/yro/04/04/14/1415217.shtml Daniel -- [EMAIL PROTECTED] Maillist-Archive:

Re: AW: [swinog] Spam from Baertsch Buerobedarf

Sandro Bertschinger wrote: Yeap, here too, only addresses from switch database. I didn't get it :( Could someone forward it to me, please? Daniel -- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/

Re: [swinog] Announcement

Hi Swinog is bothered unless IXeurope specifies the _large_ impact. Well, the webpage looks a bit different now: http://www.tix.ch/ Daniel -- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/

Re: [swinog] E-Mail

Hanspeter Eugster wrote: Löschen meiner Email-Adresse aus Ihrer Datenbank This isn't even valid german :) Daniel -- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/

Re: [swinog] SMTP - MAIL FROM:

Hi BTW: The entry may be old, but the discussion is new. However, this issue is solved now. Better late than never :-\\ You might want to start reading [EMAIL PROTECTED] There's a mail from me dating back to 21.2.2004 describing this issue. Never got a reply, though. Daniel

Re: [swinog] Backbone Solutions is spamming again.

Hi I'm interested in why de-peering is seen as an appropriate response to the spamming issue. What is the desired result? What relief does this bring to the victims of the spam? Or is this only used as a way to censure the offending network? Help me determine why I should de-peer with AS13250.

Re: PGP Key-Signing Mini-Event (was Re: [swinog] PGP Key Signing?) : script

Hi Yes, thank you Daniel. And also thanks to Olivier for the script... Saves us some minutes of typing key ids... :-) Thanks to all for participating. You probably know of the saying that you know every person on this planet over '7 ecken'. Here is empiric proof for that: 4 hops to Philip R.

Re: [swinog] Mass mailing: how to do it nicely?

hi Uhm, is this a non-teakable behavior? In my eyes it is crucial to be able to refuse SPAM at the earliest possible moment, because for every mail you can refuse during the SMTP handshake phase, you don't have to do the explicit bounce (and receive all the double bounces of non-valid sender

Re: [swinog] pgp keyservers - a good resource for spamers?

hi I was wondering what experience the ones made, who uploaded their pgp key to a pgp keyserver. Can you expect a lot more spam to the e-mail address used in the user-id? Are you using a special address for your user-id? no. and pgp servers are the least of my problems. I get 50 spams/day.

Re: [swinog] cablecom antispam strategy

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi | One that might be the *trust* way, where we deal with | x.509 certificate to manage a trust of mta | (sharing the policies regarding spam) | Kind of mail *peering*. Ever looked into Advogato's trust metric? ~

Re: [swinog] Microsoft Internet Explorer Patch 834489

hi again Microsoft has released a IE patch Number 834489. This patch makes URLs like http://username:[EMAIL PROTECTED] unusable. Since we have a few applications (intranets, closed user groups, a.s.o) running which use this kind of verification, our customers are running into problems after

Re: [swinog] Microsoft Internet Explorer Patch 834489

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi | Please don't start any political (Anti-MS) discussions now. I fully agree, | that this MS patch is pure bullshit. I'm very interested in your points of | view and possible _technical_ solutions in that. believe it or not - this makes IE more RFC

Re: [swinog] Cablecom, Hispeed and Swissonline

hi I was not able to follow the tracks entirely unfortunately I was away for a couple of days :) We are experiencing problems sending to hispeed / swissonline. But of course there have been so many postings about this issue, it is quite hard to find the right mail in the mailinglist archives now.

Re: [swinog] Contacts Swissonline / Hispeed

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi | You don't have to use NAT for that. There are for more clever | ways of redirecting. enlighten me. daniel -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

Re: [swinog] Contacts Swissonline / Hispeed

hi ok, improved version 1. our fake smtpd server, save as smtpd.sh #!/bin/sh echo '220 mx.hispeed.ch ESMTP' read input echo '550 Not today, spam-dude' exit 0 2. inetd.conf (or use it with daemontools/ucspi-tcp) 1025stream tcp nowait nobody /path/to/smtpd.sh 3.

Re: [swinog] Contacts Swissonline / Hispeed

hi that's exactly what we are about to implement at the moment. Unfortunately, it will take some more time, until we have tasted and set up everything. Besides what would you suggests for such a small one-purpose deamon (we are currently examinig Turnaway from

Re: [swinog] Contacts Swissonline / Hispeed

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, |How about tcpserver from http://cr.yp.to/ucspi-tcp.html | | tcpserver -H 0 25 echo 451 Go away | | | Be careful, not every mail server accepts such an answer in | the greeting string. You have to provide 5xx answers to | mail from attempts as

Re: [swinog] PGP Key Signing?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi |Okay, who is now organizing the PGP key signing session? | | | We have plenty of time left for this until SwiNOG8. I'll post some info | next week after having attended http://www.rubin.ch/pgp/kspa/200402/ I would do it, or do you wanna, Oliver?

Re: [swinog] SwiNOG #8 update (agenda registration)

hi There's now a company with 11 registered people. I'm not sure the company itself will appreciate that, but that's not really my/our problem. I just wanted to point this out and open a discussion about it. On my point of view, even 5-6 ppl from the same company is ok, not sure about 11. What do

Re: [swinog] Contacts Swissonline / Hispeed

hi, There are many mailservers out there which do not recognize a 550 in the HELO/EHLO answer. They will only give up when they get a 550 on either the MAIL FROM or RCPT TO command. I think we're getting there. Here is an improved version with just one caveat: When run through inetd it doesn't

Re: [swinog] Contacts Swissonline / Hispeed

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert, | From 217.26.52.23: | Trying 62.2.95.11... | Connected to mx.hispeed.ch. | Escape character is '^]'. | 220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Thu, 29 Jan | 2004 15:53:30 +0100 | | From 217.26.52.15: | Trying 62.2.95.11...

Re: [swinog] Contacts Swissonline / Hispeed

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, | If you don't have enough capacity to do the 5xx errors on the main | mail servers then setup another (small) machine and redirect (instead | of blocking) all connections to that box and let it emit 5xx errors. | That can be a very small and fast

Re: [swinog] Contacts Swissonline / Hispeed

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, | | If you don't have enough capacity to do the 5xx errors on the main | | mail servers then setup another (small) machine and redirect (instead | | of blocking) all connections to that box and let it emit 5xx errors. | | That can be a very small

Re: [swinog] PGP Key Signing?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi | http://www.cryptnet.net/fdp/crypto/gpg-party.html to summarize, and please correct me if I omitted anything: Preparation === - - Send your fingerprint to coordinator. You can retrieve ~ your ID with the following command: ~ gpg

Re: [swinog] PGP Key Signing?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi |+1 |+1 +1 me, too! me, too! i want to be part of it! can anyone give us some insight on the procedure? daniel -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

Re: [swinog] SwiNOG-8 Registration is now OPEN!

hi, REGISTRATION LINK: http://www.swinog.ch/meetings/registration.asp some participants are mentioned twice. i suggest to do a |sort|uniq ;) daniel -- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/

Re: [swinog] Open job: System Admin

hi, Read also a recent thread on NANOG. Asking for an SSH key already helps to cut down number of application ;-)) Yup, was a nice thread: http://marc.theaimsgroup.com/?l=nanogm=106844931120202w=2 The last time I posted this, I received 200 total replies. 151 contained resumes, 52

Re: [swinog] suse to be bought by novell

hi, Now it's time to find a other linux again or better change to FreeBSD I'm using SCO/Linux. That's wy better than your lousy GNU/Linux!! Btw: http://arstechnica.com/wankerdesk/03q2/nigerian-sco.html (quite ROTFLMAO) -daniel -- [EMAIL

Re: [swinog] Friday Afternoon Funnies

hi, http://groups.google.com/groups?selm=3FA87D03.E1C44EDE%40DutchElmSt.invalid Covered elsewhere, too: [..] ads served to your desktop, by way of its wireless router. [..] The router would grab a random HTTP connection every eight hours and redirect it to Belkin’s (push) advertised

Re: [swinog] Freesurf Range poluted by open relays?!?

hi, Filtering outgoing port 25 makes it so that these visitors to the net can't just connect and spew out thousands of spam messages, like they often do with these free services. They can send e-mail via the provider's mail servers, where presumably there will be some kind of restriction on

RE: [swinog] Freesurf Range poluted by open relays?!?

hi, i think the idea was, to block port 25 of the user. so the user (which could use a unsecured mailserver) cannot used as an open-relay/proxy. Aaah THAT does make sense. Thanks ;) -daniel -- [EMAIL PROTECTED] Maillist-Archive:

RE: [swinog] Freesurf Range poluted by open relays?!?

hi, The spammers typically trick a normal end user to run an PC application that sends mail by connecting directly to the remote mail server, be it AOL, Hotmail, whatever. Often the end user has no idea that they are spamming, they just believe they will get paid to run a program, and

Re: [swinog] Freesurf MX

hi, As I see it, freesurf.ch does not have a backup MX [..] There is no need for a secondary MX (as in secondary MX record) for mailserver-redundancy (albeit recommended). Layer 2 (STP?), Layer 3 (OSPF/BGP?) redundancy, anyone? Maybe Mr and Mrs Sunrise can enlighten us. But hey, Murphy has to

[swinog] Favorites

hi, A funny video for all the frustrated network admins out there. This has also gone through nanog - for everyone who missed it: http://www.he.iki.fi/favorites.mpeg [46.8 mb] http://nl4.kefro.st/rockage/favorites.mpeg [46.8 mb] None of the servers are mine - so if you want to redistribute

Re: [swinog] Favorites

hi, http://www.he.iki.fi/favorites.mpeg [46.8 mb] http://nl4.kefro.st/rockage/favorites.mpeg [46.8 mb] Found the lyrics to it: http://www.usenix.org/publications/library/proceedings/usenix2000/song.html -daniel -- [EMAIL PROTECTED]

Re: [swinog] Black Sheep Swiss ISP: Backbone Solutions (was: Backbone PRO)

hi, I respectfully disagree. It is one thing to be harbouring spammers, but quite another to be one. This is also not the first time, and discussions with Backbone have proved fruitless. It's thus painfully clear that Backbone are not at all interested in conducting themselves as would befit

Re: [swinog] Überwachung des E-Mail-Verkehrs ...

hi, Mail storage encryption. Added value. Your sales monkeys will love you. Yeah, I was thinking about such Value Added Services like Searchable Mail Archive or All your Mails on CD-ROM. -daniel -- [EMAIL PROTECTED] Maillist-Archive:

[swinog] The Security Flag in the IPv4 Header

hi, Finally an RFC was released which extends the IPv4-header to have an evil bit set allowing more easily to distinguish between malicious and good IP fragments. Bad packets can now already be dropped on the router level. Definitively worth reading:

Re: [swinog] Überwachung des E-Mail-Verkehrs ...

hi, The fact has never been really confidential. The way how we have to do it is still confidential. What do you think? I thought CH stood for Confoederatio Helvetica, not for CHina. We don't need government control. IMAO it's relatively useless. Even non-tech-savvy people could register a

Re: [swinog] Cellphone @ TIX

hi, Many people use the Siemens M20 as SMS gateway (and for OOB access). At least it's a black box with just a power LED, so it doesn't look out of place at some internet exchange :) Silly enough, somehow my friend told me it would be a 5110 [1] and when I got it it turned out to be a

[swinog] Cellphone @ TIX

hi, I've got quite a bit a uncommon question. I would like to attach a cellphone to my server @ TIX, interfacing it with gnokii [1] so I can do funky stuff such as an SMS-to-E-Mail gateway and other stuff our world really needs. I could get a nokia cellphone with damaged display, which would be

Re: [swinog] time stands still.

hi, ping swisstime.ethz.ch PING swisstime.ee.ethz.ch (129.132.2.21): 56 data bytes According to http://www.tix.ch/techdetails.htm there should be clock.tix.ch. Dead as well. Maybe a new NTP-Worm spreading? huh? :) -daniel -- [EMAIL PROTECTED]

[swinog] Random quotes using DNS TXT

hi, I created this some time ago and thought someone might find it funny, so here goes my post: http://public.tsunamihost.ch/dnsquote/ Yes, I was bored :P -daniel -- [EMAIL PROTECTED] Maillist-Archive:

Re: NEW: spamassassing (was: [swinog] New Switch AUP)

hi, # Check if Mimedefang ist running, if not, start it. */5 * * * * rootps ax | grep mimedefang | grep -v grep /dev/null || /usr/local/sbin/startmimedefang /dev/null grep [m]imedefang instead of grep mimedefang | grep -v grep. And this is highly unreliable. Use daemontools

Re: [swinog] Tiscali-ADSL blocking outbound SNMP traffic?

hi, In the case of blocking snmp i don't see a problem. Sometimes you must decide, what the best strategy for the most of your users is. I think blocking is better than having this customer at the phone and helping him to rebuild his router configuration. But it's every time some sort of

Re: NEW: spamassassing (was: [swinog] New Switch AUP)

hi, your spamassassing is working fine? Yes. The y-axis is NOT the number of processes. It's the number of cpu cycles burned. Data is retrieved from BSD Process Accounting, available on GNU/Linux Kernels starting 2.4.x. I'm not sure whether it's accurate, as I didn't completely under- stand

Re: [swinog] New Switch AUP

hi, Other solution. Register a mail address especialy for domain registration. If you receive Spam on this address you forward all this mail to bakom. :-) At least, the should warn people. I mean, why am I [EMAIL PROTECTED], daniel(at)lorch.cc, daniel AT lorch DOT cc -- protecting my mail

Re: [swinog] Tiscali-ADSL blocking outbound SNMP traffic?

hi, lol, are you so inpolite in chat? :) which net do you use? It's just that some moderators think they 0wn their cH4nn3ls and you should therefore show them more re5pecT. I'm on DALNet and EFNet. By the way, what happened to the Swinog-Net ? -daniel

Re: DNS TTLs [was: Re: [swinog] swinog.ch NS Servers]

hi, This paper was presented at the 2001 ACM SIGCOMM Internet Measurement Workshop. I went to the 2002 one last November (in Marseilles) and there were many excellent papers there too. The proceedings, including full PDF of all papers, can be found here:

Re: DNS TTLs [was: Re: [swinog] swinog.ch NS Servers]

hi, There is a nice paper studying the impact of TTL values on DNS traffic and response times: DNS Performance and the Effectiveness of Caching, by Jaeyeon Jung, Emil Sit, Hari Balakrishnan, Robert Morris (yes, *that* Morris :-), Internet Measurement Workshop 2001 (IMW 2001):

Re: [swinog] swinog.ch NS Servers

hi, swinog.ch nameserver = a.ns.swinog.ch swinog.ch nameserver = b.ns.swinog.ch swinog.ch nameserver = c.ns.swinog.ch swinog.ch nameserver = d.ns.swinog.ch swinog.ch nameserver = e.ns.swinog.ch swinog.ch nameserver = f.ns.swinog.ch swinog.ch

Re: [swinog] swinog.ch NS Servers

hi, Not afraid of DNS-poisoning? If any of the above DNS would be 0wned and would send falsified data for swinog.ch, the page could be hijacked to point somewhere else. More servers = more risk. Ok, I admit -- I'm annoying. In a nutshell: It's worse now; problem not solved. Solution: Increase

Re: [swinog] swinog.ch NS Servers

hi, Well, yes, but wouldn't one eventually notice when the different NSes give different results? (Unless they are all hacked; and that would require more effort when there are more servers - assuming they don't all run the same software). Yes, but it will take you TTL time until you can

  1   2   >