[swinog] verisgin illness

2003-09-17 Thread netbsd
hi, here is a quick and dirty hack for bind8 written by an anger guy (as we all are against verisgin) http://achurch.org/bind-verisign-patch.html here for dnscache http://tinydns.org/djbdns-1.05-ignoreip.patch of course, this has already been slashdot'ed. here is another url:

RE: [swinog] our lovely dot com and dot net

2003-09-17 Thread Daniel Aubry
On Tue, 2003-09-16 at 23:48, Adrian Senn wrote: Hi Can you provide a recipe? I think this would save many hours of RTFM ,-) some hints are linked on http://www.symlink.ch/articles/03/09/16/0842201.shtml Here is a Bind9 Patch: http://carangul.com/patch/ Daniel

[swinog] [Mark_Andrews@isc.org: BIND 9.2.2-P1 is now available.]

2003-09-17 Thread netbsd
BIND 9.2.2-P1 is now available. In response to high demand from our users, ISC is releasing a patch for BIND to support the declaration of delegation-only zones in caching/recursive name servers. Briefly, a zone which has been declared delegation-only will be effectively limited

[swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Steven Glogger
does anyone does: IP ROUTE 64.94.110.11 255.255.255.255 Null0 ? -steven __ Steven Glogger Technical Manager / Software Development Altrax AG Phone +41 1 256 81 11 Zähringerstrasse 24 Fax +41 1 256 81 12

Re: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread A. Uk / dataway GmbH
Steven Glogger [EMAIL PROTECTED] schrieb am 17 Sep 2003: does anyone does: IP ROUTE 64.94.110.11 255.255.255.255 Null0 ? yes. No complaints so far. -anthony -- | Anthony Uk| dataway GmbH | Tel. +41 1 299 9988| | [EMAIL PROTECTED] | Hohlstrasse 216 | Fax

Re: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Pascal Gloor
does anyone does: IP ROUTE 64.94.110.11 255.255.255.255 Null0 ? yes. No complaints so far. I personally dont think this is a good idea, you will just make the customers able to resolve the host and not being able to contact it. Means, mail waiting in the queue for days and browsers saying,

Re: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Andre Oppermann
Steven Glogger wrote: does anyone does: IP ROUTE 64.94.110.11 255.255.255.255 Null0 ? Not very smart. It will fill your mail server queue with mails to non- existent domains until final timeout (normally 7 days). -- Andre -- [EMAIL PROTECTED]

Re: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Jorge Morgado
same here. but bind patch sounds like a 'more clean' hack. still to be done, BTW ;-) jorge On 17-Sep-2003 A. Uk / dataway GmbH wrote: Steven Glogger [EMAIL PROTECTED] schrieb am 17 Sep 2003: does anyone does: IP ROUTE 64.94.110.11 255.255.255.255 Null0 ? yes. No complaints so far.

RE: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Steven Glogger
its incredible. even their index is going up: https://zkb.teledata.de/ZKB.html?SPRACHE=DEMODUL=CHARTSYM=VRSN.NAS but i'm not a financial specialist if this is normal or just because their shareholders like what they did... -steven -Original Message- From: [EMAIL PROTECTED]

Re: [swinog] MX Backup swinog -- FW: Returned mail: see transcript for details

2003-09-17 Thread Fredy Kuenzler
Steven Glogger wrote: nice one: the backup mx server for swinog.ch gave me that back: The original message was received at Wed, 17 Sep 2003 14:43:39 +0200 from office.mrmouse.ch [81.94.96.14] - The following addresses had permanent fatal errors - [EMAIL PROTECTED] (reason: 550

Re: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Roger Buchwalder
A. Uk / dataway GmbH wrote: Steven Glogger [EMAIL PROTECTED] schrieb am 17 Sep 2003: i'm not ready to patch only for verisign my dns server, therefore i will null route the stuff - even if i eliminate some vhosts which are running on their machine... exactly. All these solutions which have

Re: [swinog] IP ROUTE 64.94.110.11 255.255.255.255 Null0

2003-09-17 Thread Pascal Gloor
and a small mailserver like all @mail - 0null: hehe You should reject the mail with a permanent fatal error. Otherwise the enduser wont get any error message. Pascal -- [EMAIL PROTECTED] Maillist-Archive:

Re: [swinog] Rate-Limiting ICMP

2003-09-17 Thread Fredy Kuenzler
Lukas Beeler wrote: * Fredy Kuenzler [EMAIL PROTECTED]: We seem to experience quite a bit of ICMP DOS attacks. The come along in waves, which makes some devices within our backbone stumble and loosing packets. DoS, or the well known nacchi worm? (Nacchi uses 92byte Packets exclusively, so it

Re: [swinog] Rate-Limiting ICMP

2003-09-17 Thread Roger Buchwalder
Hello found on: http://www.cisco.com/warp/public/707/cisco-sn-20030820-nachi.shtml#policyrouting says: Warning: Microsoft Windows tracert utility uses 92 bytes sized ICMP packets. Using PBR to filter those packets will cause tracert utility not to work. Nachhi windows tracert's free... Roger