[swinog] DNSSEC Deployment in ARPA Children

2010-04-28 Diskussionsfäden Joe Abley
Colleagues,

ICANN plans to begin a test deployment of DNSSEC in various zones starting on 
2010-04-29:

  IN-ADDR-SERVERS.ARPA
  IP6.ARPA
  IP6-SERVERS.ARPA
  IRIS.ARPA
  URI.ARPA
  URN.ARPA

These zones will be signed using RSASHA256 and NSEC with 2048-bit KSKs and 
1024-bit ZSKs.

Given DNSSEC deployment experience to date, ICANN does not expect the signing 
of these zones to cause any operational problems. However, should you have any 
concerns please feel free to contact us at tic...@dns.icann.org or phone +1 310 
301 5810 (e-mail/ticket preferred).

At the end of the test period, given no observed or reported harmful effects, 
ICANN will arrange for trust anchors for these zones to be included in ARPA as 
DS RRSets and will invite the five RIRs to submit DS RRSet add/delete requests 
in IP6.ARPA when they are ready. We anticipate the testing period to last at 
least two weeks.

Regards,


Joe Abley
Director DNS Operations, ICANN

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


[swinog] Job Offer

2010-04-28 Diskussionsfäden Rolf Tschumi

Hello together,
I looks for a job as network Engineer.
If where which is free, ask off-line contact.

Greetings Rolf 




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Geolocating IP's

2010-04-28 Diskussionsfäden Gregory Agerba

Hello,

> Is anybody of you aware, how the most popular services (Google,
> Zattoo, Facebook, etc) are matching geographic locations to
> ip-adresses ?

Probably a mix between some sources of GeoIP DB such as 
MaxMind/ip2location, a mix of home-made database (ASN, IPs, latency) and 
obviously browser locales settings.


Each probably handle it in a different way.

> Now we have a customer located in Germany, so I created a
> inetnum-block with his subnet in ripe-db with country-code DE.
> This was a week ago. The customer is still complaining that he is
> constantly redirected to the swiss-versions of all the services.

You should maybe have given a /24 PI rather than chunking one of your 
main IP block. I am sure those Geolocating-guy would lookup more often 
/24 PI than /23 PA for instance.


> Does anybody of you experienced a similar problem ? Does anybody knows
> proper solution ?

Yes, had been given a Greek IP space from RIPE about a year ago or so. 
After 6-9 months of use it seems that finally most of those GeoIP caught 
the new location correctly. Only solution: be patient.


> actually there's usually much more information than just country code.
> At least sites like http://adultfriendsfinder.com/  show my town 
quite > precisely, and my IP is a part of a huge Cablecom pool.


Quite true. They probably got enough money to bust customers.

> I am actually not fully satified with the quality of those ads.

What? The girls doesn't live in your town or they are not hot enough? 
Just kidding obviously ;)


> When I still resided somewhere between Baden and Bremgarten I was
> recognised as "Otelfingen" (not a real surprise with a
> Cablecom-connection, right?).

It is maybe done on purpose. I can just imagine if they were to display 
one of these "pheromone-friendly" picture and pretend she's from my town 
or anywhere close, I would different catch the trap. Best guess, some 
MBA marketing told them not to.


This being

> Since I changed to our own VDSL I seem to live in Therwil (BL)
> according to the ads. That's over two years now. And I do certainly
> not speak 'Baseldiitsch'.

Interesting. Then it's really true that each region of Switzerland got 
his own sha-encryption of the German? 


--
Best Regards,
Gregory Agerba


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Geolocating IP's

2010-04-28 Diskussionsfäden Fredy Kuenzler

Am 27.04.2010 10:15, schrieb Stefan Renner:

Is anybody of you aware, how the most popular services (Google, Zattoo,
Facebook, etc) are matching geographic locations to ip-adresses ?

Our AS (41666) is located in CH, so also all the ripe objects are
registered with country-code CH.

Now we have a customer located in Germany, so I created a inetnum-block
with his subnet in ripe-db with country-code DE. This was a week ago.
The customer is still complaining that he is constantly redirected to
the swiss-versions of all the services.

Does anybody of you experienced a similar problem ? Does anybody knows
proper solution ?


At the time when I was with Zattoo (until Sept. 2008) Maxmind database was
used and was updated every few weeks. I don't think much has changed since then.

Check your IP block using the Maxmind database. I assume you need to assign
at least a /24 to a certain country, smaller blocks will probably not be
recognised.

Be patient. If the range doesn't get updated at Maxmind, write to them and
ask for assistance.

Once Maxmind is up-to-date, be patient again for a few weeks, and if Zattoo
is still not in sync, you may ask their support for help.

HTH,
Fredy


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Geolocating IP's

2010-04-28 Diskussionsfäden rainer
> actually there's usually much more information than just country code.
> At least sites like http://adultfriendsfinder.com/  show my town quite
> precisely, and my IP is a part of a
> huge Cablecom pool.

Maybe there's a super-cookie left on your harddisk, from the last time you
logged in ;-)

SCNR.


Rainer


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog