Re: [swinog] Bluewin DNS1 DNS2 replication lag?

2004-01-21 Thread Alexander Gall
On Wed, 21 Jan 2004 11:19:27 +0100, Didier Leimbach [EMAIL PROTECTED] said:

 Hello,
 this is my first post. to me swinog seems to be 
 a good list to post my question. 
 please correct me if i'm wrong.

 here's my question:

 On Monday the TTL for www.juraworld.com has 
 been changed to 1h on ns1.lan.ch and ns2.lan.ch.
 Today ist has been changed to 15min as 
 we're getting ready to move servers.

 Yet, dns2.bluewin.ch doesn't reflect this TTL.

How large was the TTL before you changed it on Monday?  Given the
remaining TTL on dns2 of about 20 hours, this result is to be expected
only when the original TTL was at least around 68 hours (20+2*24,
assuming you lowered the TTL at noon on Monday).

 Has anyone an idea how bluewins dns are setup?
 Bluewin support gave me an almost unbelievable answer:
 dns2 is only backup and updated every 14 days from dns1

I don't know what they mean by update.  I sure hope dns2 is up to
date for the zones for which it is authoritative :-)  However, that's
beside the point since your problem is related to caching.  

--
Alex

 thanks very much!
  didier leimbach



 dig @dns1.bluewin.ch www.juraworld.com

 ;  DiG 9.2.3  @dns1.bluewin.ch www.juraworld.com
 ;; global options:  printcmd
 ;; Got answer:
 ;; -HEADER- opcode: QUERY, status: NOERROR, id: 41
 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

 ;; QUESTION SECTION:
 ;www.juraworld.com. IN  A

 ;; ANSWER SECTION:
 www.juraworld.com.  900 IN  A   62.204.127.37

 ;; AUTHORITY SECTION:
 juraworld.com.  900 IN  NS  ns1.lan.ch.
 juraworld.com.  900 IN  NS  ns2.lan.ch.

 ;; ADDITIONAL SECTION:
 ns1.lan.ch. 2676IN  A   212.60.61.245
 ns2.lan.ch. 1847IN  A   212.60.63.245

 ;; Query time: 218 msec
 ;; SERVER: 195.186.1.110#53(dns1.bluewin.ch)
 ;; WHEN: Wed Jan 21 11:10:32 2004
 ;; MSG SIZE  rcvd: 125

 ---

 ;  DiG 9.2.3  @dns2.bluewin.ch www.juraworld.com
 ;; global options:  printcmd
 ;; Got answer:
 ;; -HEADER- opcode: QUERY, status: NOERROR, id: 41
 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 13

 ;; QUESTION SECTION:
 ;www.juraworld.com. IN  A

 ;; ANSWER SECTION:
 www.juraworld.com.  74385   IN  A   62.204.127.37

 ;; AUTHORITY SECTION:
 com.172797  IN  NS  g.gtld-servers.net.
 com.172797  IN  NS  h.gtld-servers.net.
 com.172797  IN  NS  i.gtld-servers.net.
 com.172797  IN  NS  j.gtld-servers.net.
 com.172797  IN  NS  k.gtld-servers.net.
 com.172797  IN  NS  l.gtld-servers.net.
 com.172797  IN  NS  m.gtld-servers.net.
 com.172797  IN  NS  a.gtld-servers.net.
 com.172797  IN  NS  b.gtld-servers.net.
 com.172797  IN  NS  c.gtld-servers.net.
 com.172797  IN  NS  d.gtld-servers.net.
 com.172797  IN  NS  e.gtld-servers.net.
 com.172797  IN  NS  f.gtld-servers.net.

 ;; ADDITIONAL SECTION:
 a.gtld-servers.net. 108097  IN  A   192.5.6.30
 b.gtld-servers.net. 119329  IN  A   192.33.14.30
 c.gtld-servers.net. 119329  IN  A   192.26.92.30
 d.gtld-servers.net. 119329  IN  A   192.31.80.30
 e.gtld-servers.net. 119329  IN  A   192.12.94.30
 f.gtld-servers.net. 119150  IN  A   192.35.51.30
 g.gtld-servers.net. 119329  IN  A   192.42.93.30
 h.gtld-servers.net. 119150  IN  A   192.54.112.30
 i.gtld-servers.net. 119329  IN  A   192.43.172.30
 j.gtld-servers.net. 118991  IN  A   192.48.79.30
 k.gtld-servers.net. 118991  IN  A   192.52.178.30
 l.gtld-servers.net. 119329  IN  A   192.41.162.30
 m.gtld-servers.net. 118948  IN  A   192.55.83.30

 ;; Query time: 31 msec
 ;; SERVER: 195.186.1.111#53(dns2.bluewin.ch)
 ;; WHEN: Wed Jan 21 11:11:16 2004
 ;; MSG SIZE  rcvd: 483

 --
 [EMAIL PROTECTED] Maillist-Archive:
 http://www.mail-archive.com/swinog%40swinog.ch/

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: AW: [swinog] Bluewin DNS1 DNS2 replication lag?

2004-01-21 Thread Alexander Gall
On Wed, 21 Jan 2004 13:24:36 +0100, Didier Leimbach [EMAIL PROTECTED] said:

 Hi Alex,
 thanks for your reply.
 I indeed forgot to mention that the original TTL was 24h. 
 So everything should have been as expected since about yesterday.

Yes.  In that case, I don't know why the A RR for www.juraworld.com
is still in the cache of dns2.bluewin.ch.

 I also find it strange that dns2 is giving me all the 
 root-server as glue.

I think that it just didn't happen to have the glue for
juraworld.com. in its cache, so it returned the glue for the
GTLD-servers instead (not the root servers).  After querying it for
the NS records for that domain, it now reports the expected glue (at
least until those records expire)

;  DiG 9.4.0s20040114055632  @dns2.bluewin.ch www.juraworld.com.
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 7936
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.juraworld.com. IN  A

;; ANSWER SECTION:
www.juraworld.com.  65625   IN  A   62.204.127.37

;; AUTHORITY SECTION:
juraworld.com.  747 IN  NS  ns1.lan.ch.
juraworld.com.  747 IN  NS  ns2.lan.ch.

;; ADDITIONAL SECTION:
ns1.lan.ch. 330 IN  A   212.60.61.245
ns2.lan.ch. 642 IN  A   212.60.63.245

;; Query time: 3 msec
;; SERVER: 195.186.1.111#53(dns2.bluewin.ch)
;; WHEN: Wed Jan 21 13:37:59 2004
;; MSG SIZE  rcvd: 125

 we'll see what happens by tomorrow

Right.  The old records should be definitely gone by then :-/

--
Alex

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


[swinog] MX Swissonline Down?

2004-01-21 Thread Peter Baumann
Hello

We have more and more questions from customers which cannot send emails 
to swissonline.ch.
It seems that since some days swissonline is swissoffline :-)
Does someone know why mx.hispeed.ch is down?

dig swissonline.ch mx:

;; QUESTION SECTION:
;swissonline.ch.IN  MX
;; ANSWER SECTION:
swissonline.ch. 2597IN  MX  10 mx.hispeed.ch.
;; ADDITIONAL SECTION:
mx.hispeed.ch.  8093IN  A   62.2.95.11
telnet mx.hispeed.ch 25
Trying 62.2.95.11... - no answer.
Peter
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


[swinog] Swissoffline

2004-01-21 Thread Peter Baumann
As an addon to my mail before:

I also tried to connect to mx.hispeed.ch port 25 from a machine 
connected at another provider.
This machine will not send any email and is (hopefully) not blocked by 
swissoffline.

So, there must be a general problem with this mx-host.

By the way: How can you specify only one mx-host for a domain like 
swissonline.ch with so many email-users on it???

Peter
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


R: [swinog] MX Swissonline Down?

2004-01-21 Thread Manuel Wenger
telnet mx.hispeed.ch 25
Trying 62.2.95.11... 

220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Wed, 21 Jan 2004 16:06:27 
+0100

-Messaggio originale-
Da: Peter Baumann [mailto:[EMAIL PROTECTED] 
Inviato: mercoledì, 21. gennaio 2004 15:53
A: [EMAIL PROTECTED]
Oggetto: [swinog] MX Swissonline Down?


Hello

We have more and more questions from customers which cannot send emails 
to swissonline.ch.
It seems that since some days swissonline is swissoffline :-) Does someone know why 
mx.hispeed.ch is down?


___
Ticinocom SA - Via dei Pioppi 10 - 6616 Losone
Tel 0844 007070 - Fax 0844 007071
http://www.ticinocom.com

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


AW: AW: [swinog] Bluewin DNS1 DNS2 replication lag?

2004-01-21 Thread Didier Leimbach
Hi Alex,

Excellent post of yours. 
I really appreciate your feedback and precise language.
But then again, this should come as no 
surprise from @switch.ch. :)

I could verify that dns2.bluewin.ch stops giving me 
the GTLD (not the root :)) glue, after having been 
queried for the NS for the domain. 
This was my personal 'Today's DNS Lesson'.

Enjoy your evening,
 Didier
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] Problems with Cablecom MX

2004-01-21 Thread Oliver Bolliger
On Wed, 21 Jan 2004, [EMAIL PROTECTED] wrote:

 This is the braindamaged Cablecom Antispam configuration. If you make
 to many connections to them during a certain amount of time they
 automatically add a firewall rule to their ipfilter on mx.cablecom.ch.

 We've run into this problem at least two times last year.

we have some servers working (high volume) and some servers not
working (rather low volume), all with matching ptr and A records,
not known to be blacklisted and so on.

personally i think they did some changes to this end of last week -
we have been watching some @hispeed.ch or @swissonline.ch queues 
start growing on friday last weeek.


 Of course they don't remove it automatically, you have to reach their
 mailadmin to do so, which isn't quite easy. And well of course,
 if you reach the guy, he just won't understand why his setup
 is all crap.

 Patrick 

an urgent email to postmaster(at)cablecom.ch and 
postmaster(at)hispeed.ch sent monday evening is still unanswered.

so this morning i tried to get a hold on a postmaster or at least a 
person who understands me  - but no way!

i ended up educating a 1st-level hotline agent in tcp, smtp and dns. 
he told me some weird stuff about reverse lookup and other things 
sounding nice - but he actualy didn't have a clue what i was
talking about. he opened a ticket, but no answer so far

it would be nice if a cablecom engineer on this list would share 
some details on how their smtp 'security' is implemented.

oliver



--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Problems with Cablecom MX

2004-01-21 Thread Peter Baumann
Oliver Bolliger wrote:

it would be nice if a cablecom engineer on this list would share 
some details on how their smtp 'security' is implemented.

oliver
 

Hi Oliver

At least someone tries to help:

Jonas Staempfli wrote:
the only idea that i've got is, that you don't have reverse-dns-lookup
activated?? sorry, i'm not an admin, but i'm working in the technical
support. 

Thank you Jonas for your help. But it seems that we all have the 
reverse-dns properly configured.

Peter
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Problems with Cablecom MX

2004-01-21 Thread Jonas Staempfli
i'm a very small fish, so i'm sorry that i can't help more. :)

 [EMAIL PROTECTED] 01/21/04 5:18 PM 
Oliver Bolliger wrote:

it would be nice if a cablecom engineer on this list would share 
some details on how their smtp 'security' is implemented.

oliver
  

Hi Oliver

At least someone tries to help:

Jonas Staempfli wrote:
the only idea that i've got is, that you don't have reverse-dns-lookup
activated?? sorry, i'm not an admin, but i'm working in the technical
support. 


Thank you Jonas for your help. But it seems that we all have the 
reverse-dns properly configured.


Peter
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] Problems with Cablecom MX

2004-01-21 Thread Kurt A. Schumacher
 i'm a very small fish, so i'm sorry that i can't help more. :)

We will try to rescue you, Nemo ;-)

Greetz,

-Kurt.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonas Staempfli
Sent: Wednesday, January 21, 2004 5:27 PM
To: [EMAIL PROTECTED]
Subject: Re: [swinog] Problems with Cablecom MX
snip


--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Problems with Cablecom MX

2004-01-21 Thread Nik Hug
Hello

From: [EMAIL PROTECTED]
 This is the braindamaged Cablecom Antispam configuration. If you make
 to many connections to them during a certain amount of time they
 automatically add a firewall rule to their ipfilter on mx.cablecom.ch.

 We've run into this problem at least two times last year.

 Of course they don't remove it automatically, you have to reach their
 mailadmin to do so, which isn't quite easy. And well of course,
 if you reach the guy, he just won't understand why his setup
 is all crap.

yes this sounds familiar to me! Some week's ago we had troubles to reach
mx.hispeed.ch and after some barking we got a short because of spam from
your servers as answer from cablecom.
(but without proof of a spam report at all! Sure we make this very hidden
abuse@ entry at RIPE just for our pleasure - like all of you I guess ;-)
Just being blocked by ugly iprules is always much better than a clear
spam-report.

And it seemed like the whole range (different /24's) was blocked  (not
only the ip's of our mx's)

Greetings

Nik

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Problems with Cablecom MX

2004-01-21 Thread Peter Baumann
Oliver Bolliger wrote:

we have some servers working (high volume) and some servers not
working (rather low volume), all with matching ptr and A records,
not known to be blacklisted and so on.
personally i think they did some changes to this end of last week -
we have been watching some @hispeed.ch or @swissonline.ch queues 
start growing on friday last weeek.

 

Oliver,

Can you tell me what do you plan to tell to your customers?

It seems that swissonline blocked our whole isp-range on port 25, I 
cannot connect from any ip to mx.hispeed.ch port smtp.

Let's see what is going on at next...

Peter
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Problems with Cablecom MX

2004-01-21 Thread Erich Hohermuth


On Wednesday 21 January 2004 17:06, Oliver Bolliger wrote:
 personally i think they did some changes to this end of last week -
 we have been watching some @hispeed.ch or @swissonline.ch queues
 start growing on friday last weeek.

I run some tests from our mailservers. The MX to swissonline.ch and hispeed.ch 
points to mx.hispeed.ch. I've only get twice a connection refuse.

# telnet mx.hispeed.ch. 25
Trying 62.2.95.11...
Connected to mx.hispeed.ch.
Escape character is '^]'.
220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Wed, 21 Jan 2004 
19:34:26 +0100
quit
221 2.0.0 mx.hispeed.ch closing connection
Connection closed by foreign host.

Regards
Erich

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] Problems with Cablecom MX

2004-01-21 Thread Roger Buchwalder
hmmm... from our cisco (?):
router# telnet 62.2.95.11 25
220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Wed, 21 Jan 
2004 19:44:48 +0100
ehlo into.ch
250-mx.hispeed.ch Hello tix1.into.ch [194.42.48.59] (may be forged), 
pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 10485760
250-DSN
250-AUTH PLAIN LOGIN
250-DELIVERBY
250 HELP
quit
221 2.0.0 mx.hispeed.ch closing connection

but one of our mailserver:
telnet 62.2.95.11 25
port 25: failed to open
myabe we may change the ip form our smtp? but this should NOT to be the 
solution...

cheers
Rog
Erich Hohermuth schrieb:
On Wednesday 21 January 2004 17:06, Oliver Bolliger wrote:

personally i think they did some changes to this end of last week -
we have been watching some @hispeed.ch or @swissonline.ch queues
start growing on friday last weeek.


I run some tests from our mailservers. The MX to swissonline.ch and hispeed.ch 
points to mx.hispeed.ch. I've only get twice a connection refuse.

# telnet mx.hispeed.ch. 25
Trying 62.2.95.11...
Connected to mx.hispeed.ch.
Escape character is '^]'.
220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Wed, 21 Jan 2004 
19:34:26 +0100
quit
221 2.0.0 mx.hispeed.ch closing connection
Connection closed by foreign host.

Regards
Erich
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/



--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] Problems with Cablecom MX

2004-01-21 Thread Oliver Bolliger
I got an answer from cablecom hotline. unfortunatley I
was out of the office and someone else took the phone.

they just told him everything is fine now, we have solved 
the problem. well, I don't think so :(

I am still not able to connect mx.hispeed.ch on tcp/25 from
some of our servers.

any switch or router in our network can connect mx.hispeed.ch, 
even the laptop I'am working on connects. just some ip's seem
to get blocked, which sounds to me like blacklisting

Peter Baumann wrote:

 Oliver,

 Can you tell me what do you plan to tell to your customers?

 It seems that swissonline blocked our whole isp-range on port 25, I 
 cannot connect from any ip to mx.hispeed.ch port smtp.
 

Let's see what is going on at next...

Peter

as we only see some of our ip's blocked I guess our 
postmaster is re-routing smtp for cablecom domains.

anyone working for cablecom/swissonline on this list??! 

oliver
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] Problems with Cablecom MX

2004-01-21 Thread Daniel Kamm
Oliver, from your customer side, I cannot connect to mx.hispeed.ch:25
from a green bb connection.

Cheers
 - Dan


On Wed, 2004-01-21 at 21:06, Oliver Bolliger wrote:
 I got an answer from cablecom hotline. unfortunatley I
 was out of the office and someone else took the phone.
 
 they just told him everything is fine now, we have solved 
 the problem. well, I don't think so :(
 
 I am still not able to connect mx.hispeed.ch on tcp/25 from
 some of our servers.
 
 any switch or router in our network can connect mx.hispeed.ch, 
 even the laptop I'am working on connects. just some ip's seem
 to get blocked, which sounds to me like blacklisting
 
 Peter Baumann wrote:
 
  Oliver,
 
  Can you tell me what do you plan to tell to your customers?
 
  It seems that swissonline blocked our whole isp-range on port 25, I 
  cannot connect from any ip to mx.hispeed.ch port smtp.
  
 
 Let's see what is going on at next...
 
 Peter
 
 as we only see some of our ip's blocked I guess our 
 postmaster is re-routing smtp for cablecom domains.
 
 anyone working for cablecom/swissonline on this list??! 
 
 oliver
 --
 [EMAIL PROTECTED] Maillist-Archive:
 http://www.mail-archive.com/swinog%40swinog.ch/
 

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: R: [swinog] MX Swissonline Down?

2004-01-21 Thread Raffael Marty
Well, the first comment about a LoadBalancer to get high-availability is
not really a solution: What happens if the router or switch or whatever
goes down? So co-locate please!

Secondly, what about this:

- Transcript of session follows -
 while talking to mx.hispeed.ch.:
 DATA
 550 5.7.1 [EMAIL PROTECTED]... Fix reverse DNS for 217.118.195.58
or use your ISPs mail server

I have a reverse entry for my 217.xxx ... Any clues?

  -ram

-- 
  Raffael Marty, CISSP
  Security Engineer
  Lead Content Team @ ArcSight Inc.
  1309 South Mary Ave, Sunnyvale, CA 94002, USA

quote who=Manuel Wenger
 telnet mx.hispeed.ch 25
 Trying 62.2.95.11...

 220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Wed, 21 Jan
 2004 16:06:27 +0100

 -Messaggio originale-
 Da: Peter Baumann [mailto:[EMAIL PROTECTED]
 Inviato: mercoledì, 21. gennaio 2004 15:53
 A: [EMAIL PROTECTED]
 Oggetto: [swinog] MX Swissonline Down?


 Hello

 We have more and more questions from customers which cannot send emails
 to swissonline.ch.
 It seems that since some days swissonline is swissoffline :-) Does
 someone know why mx.hispeed.ch is down?


 ___
 Ticinocom SA - Via dei Pioppi 10 - 6616 Losone
 Tel 0844 007070 - Fax 0844 007071
 http://www.ticinocom.com

 --
 [EMAIL PROTECTED] Maillist-Archive:
 http://www.mail-archive.com/swinog%40swinog.ch/



--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: [swinog] MX Swissonline Down?

2004-01-21 Thread Fabian Uebersax
EHLO,

 Secondly, what about this:
 
 - Transcript of session follows -
  while talking to mx.hispeed.ch.:
  DATA
  550 5.7.1 [EMAIL PROTECTED]... Fix reverse DNS for 
 217.118.195.58
 or use your ISPs mail server
 
 I have a reverse entry for my 217.xxx ... Any clues?

Hmm, doesn't work for me:

-
# dig -x 217.118.195.58  

;  DiG 9.2.3  -x 217.118.195.58
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 17103
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
-

Well, at least you're able to establish a _connection_ to mx.hispeed.ch :-
Our server IP range was blocked there for days and days but after a gazillion of mails 
and phone calls I finally found a friend of mine whose friend is a friend [...] of 
someone who works at cablecom and happens to be sitting next to the cablecom 
mailserver admin. So finally they added a -j ACCEPT rule for our MTAsduh!

Let's see if I can find out any contact information of that admin

BTW, the following explanations were given to me:

- cablecom applies filters whenever they feel like
- no-one gets informed when a filter is added
- the filter will remain active until the admin of the IP / IP range that was filtered 
contacts cablecom
- they do not read mails sent to [EMAIL PROTECTED]/swissonline.ch, quote there are 
simply too many mails coming in there so it's easier to simply /dev/null all of them

sigh!

cheers,
- Fabian
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


RE: R: [swinog] MX Swissonline Down?

2004-01-21 Thread Kurt A. Schumacher
Raffy,

$ nslookup 217.118.195.58
Server:  localhost
Address:  127.0.0.1
*** localhost can't find 217.118.195.58: Non-existent host/domain

So let's see:

$ nslookup
Default Server:  localhost
Address:  127.0.0.1

 set type=soa
 195.118.217.in-addr.arpa
Server:  localhost
Address:  127.0.0.1

Non-authoritative answer:
195.118.217.in-addr.arpa
origin = ns1.into.ch
mail addr = postmaster.into.ch
serial = 2003122001
refresh = 7200 (2 hours)
retry   = 1800 (30 mins)
expire  = 1209600 (14 days)
minimum ttl = 86400 (1 day)

Authoritative answers can be found from:
195.118.217.in-addr.arpanameserver = ns2.into.ch
195.118.217.in-addr.arpanameserver = ns1.into.ch
ns2.into.ch internet address = 217.118.199.11
ns1.into.ch internet address = 217.118.195.11
 server ns1.into.ch
Default Server:  ns1.into.ch
Address:  217.118.195.11

 217.118.195.58
Server:  ns1.into.ch
Address:  217.118.195.11
*** ns1.into.ch can't find 217.118.195.58: Non-existent host/domain

I am not highly convinced on Cablecom quality - at least on certain services, but at 
least our DNS nor the authority for this
network are not able to resolve the address listed - sorry, but _this_ does not look 
like a Cablecom problem here.

-Kurt.

PS. Yes, I am aware of dig, but I am over 42 ;-)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raffael Marty
Sent: Wednesday, January 21, 2004 11:50 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: R: [swinog] MX Swissonline Down?


Well, the first comment about a LoadBalancer to get high-availability is not really a 
solution: What happens if the router or switch
or whatever goes down? So co-locate please!

Secondly, what about this:

- Transcript of session follows -
 while talking to mx.hispeed.ch.:
 DATA
 550 5.7.1 [EMAIL PROTECTED]... Fix reverse DNS for 217.118.195.58 or use your 
ISPs mail server

I have a reverse entry for my 217.xxx ... Any clues?

  -ram

-- 
  Raffael Marty, CISSP
  Security Engineer
  Lead Content Team @ ArcSight Inc.
  1309 South Mary Ave, Sunnyvale, CA 94002, USA

quote who=Manuel Wenger
 telnet mx.hispeed.ch 25
 Trying 62.2.95.11...

 220 mx.hispeed.ch ESMTP Sendmail 8.12.6/8.12.6/tornado-1.0; Wed, 21 
 Jan 2004 16:06:27 +0100

 -Messaggio originale-
 Da: Peter Baumann [mailto:[EMAIL PROTECTED]
 Inviato: mercoledì, 21. gennaio 2004 15:53
 A: [EMAIL PROTECTED]
 Oggetto: [swinog] MX Swissonline Down?


 Hello

 We have more and more questions from customers which cannot send 
 emails to swissonline.ch. It seems that since some days swissonline is 
 swissoffline :-) Does someone know why mx.hispeed.ch is down?


 ___
 Ticinocom SA - Via dei Pioppi 10 - 6616 Losone
 Tel 0844 007070 - Fax 0844 007071
 http://www.ticinocom.com

 --
 [EMAIL PROTECTED] Maillist-Archive: 
 http://www.mail-archive.com/swinog%40swinog.ch/



--
[EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/


--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: R: [swinog] MX Swissonline Down?

2004-01-21 Thread Erich Hohermuth
Yet another test ;-)

  550 5.7.1 [EMAIL PROTECTED]... Fix reverse DNS for 217.118.195.58
 or use your ISPs mail server

 I have a reverse entry for my 217.xxx ... Any clues?

Are you sure ? 

1. Check 
#whois -h whois.ripe.net 195.118.217.in-addr.arpa

domain:   195.118.217.in-addr.arpa
descr:Reverse delegation for Internet Online AG
admin-c:  RB351-RIPE
admin-c:  RM1122-RIPE
tech-c:   RB351-RIPE
tech-c:   RM1122-RIPE
zone-c:   RB351-RIPE
zone-c:   RM1122-RIPE
nserver:  ns1.into.ch
nserver:  ns2.into.ch
changed:  [EMAIL PROTECTED] 20020111
source:   RIPE

2.Check

#dig @ns1.into.ch 58.195.118.217.in-addr.arpa ANY

; -HEADER- opcode: QUERY, status: NXDOMAIN   

Erich



--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


[swinog] While talking cablecom: cablecom.biz mails stay in the queues, too...

2004-01-21 Thread Kurt A. Schumacher
Received some business cards from some Cablecom business employees this week, and, 
after sending a bunch of complaints:

...
  Recipient #1: [EMAIL PROTECTED], Route=cablecom.biz
  Error count=22
  Last error: %MX-W-NOCONTACT, could not establish contact with any mail servers 
for this destination
...

$ nslookup
Default Server:  localhost
Address:  127.0.0.1

 set type=mx
 cablecom.biz
Server:  localhost
Address:  127.0.0.1

cablecom.biz
origin = ns1.cablecom.net
mail addr = hostmaster.cablecom.net
serial = 2003051301
refresh = 28800 (8 hours)
retry   = 7200 (2 hours)
expire  = 604800 (7 days)
minimum ttl = 86400 (1 day)


And you wonder about their customer infrastructure quality? Oh well...

-Kurt.






--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] MX Swissonline Down?

2004-01-21 Thread Adrian Senn
Hi

- cablecom applies filters whenever they feel like
- no-one gets informed when a filter is added
Same for our customer. We (cevinet.ch; hosting service for ymca/ywca 
switzerland also know as cevi) do forward a lot of mails to the hosting 
providers in Switzerland.
The spam filter remove the mails without a warning to the customer.
I saw on the logfile a successful sending. But the mail never reached 
the customer. Very sad. Only solution for the moment: Disable Spam 
filtering on the webformular.
Bad spamfiltering :-/

- the filter will remain active until the admin of the IP / IP range that was filtered 
contacts cablecom
- they do not read mails sent to [EMAIL PROTECTED]/swissonline.ch, quote there are simply 
too many mails coming in there so it's easier to simply /dev/null all of them
Seems to be a black hole.

--
Kind regards Adrian Senn
--
|p mbox: [EMAIL PROTECTED] _ |
|g mbox: [EMAIL PROTECTED]  ASCII ribbon campaign ( )|
|www:  http://www.senn.ch/  - against HTML email  X |
|  http://www.cevinet.ch/vCards / \|
--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/


Re: [swinog] MX Swissonline Down?

2004-01-21 Thread Erich Hohermuth
On Thursday 22 January 2004 00:19, Fabian Uebersax wrote:
 - cablecom applies filters whenever they feel like
 - no-one gets informed when a filter is added
 - the filter will remain active until the admin of the IP / IP range that
 was filtered contacts cablecom - they do not read mails sent to
 [EMAIL PROTECTED]/swissonline.ch, quote there are simply too many mails
 coming in there so it's easier to simply /dev/null all of them

Ok, at least we have a statement. As I always say, everyone is free to accept 
mails or not. After all you will get only spam and everything else is blocked 
;-.

Lets play a silly game like: I block you because you block me ! 
Let the customers be the referees.

just my 0.5 Sfr.

Regards
Erich

--
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/