Re: [swinog] G.Fast DSL modems - bridge only

2021-04-01 Diskussionsfäden Peter Rohrer
On Thu, 1 Apr 2021 12:05:30 Marc SCHAEFER  wrote:
> I am running a FRITZ!Box 7582 in G.fast mode on a FTTS init7
> (probably with Swisscom behind it) in bridge mode, terminating the
> PPP on an apu2.
> 
> I particularly like the amount of detail you have through the web GUI
> on the link itself.

The amount of detail on the Fritz!Box is definitely better than on the
Zyxel XMG-3927, I operate both of them (although not as a bridge). In
terms of speed, I can't tell, I only used them for a short time on the
same line, and the Fritz!Box was a bit faster (But the line was so bad
that g.fast didn't provide more total throughput than VDSL2).


> > Anybody has any positive/negative experiences and/or other
> > recommendations?  
> 
> As the FRITZ!Box is a bit overkill, some people mentionned instead
> the use of SFP/GBIC converters, but I did not try yet.

As far as I know, some or all of them (at least the one which Swisscom
delivered as an upgrade to their Internet-Box plus) need special
support by the device/router they are plugged in. Therefore you can't
just plug them into your switch and connect your router to the switch
through ethernet.


As a side note, g.fast is very picky about your line quality, optimize
_everything_ on the cable connection inside your building which is not
part of swisscoms infrastructure. One direct, short, high quality cable
from the HüP to an RJ45 plug (no bridged tap), and a short, high quality
cable from there to your modem. I you don't get the speed you should by a
large margin, complain to Swisscom through your provider. I did so, and
in the end Swisscom replaced an old, out of spec landline cable (the
outdoor type, where birds can sit on :-) ).
Of course, we would all like to have real fiber connections.

Kind Regards

Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


[swinog] Mail rejection at bluewin

2021-03-28 Diskussionsfäden Peter Rohrer
Hello everybody

Since yesterday, we see a lot of bounced messages to bluewin addresses with 
SMTP code 554, for example:
relay=mxbw-bluewin-ch.hdb-cs04.ellb.ch[195.186.227.50]:25, delay=0.16, 
delays=0/0.01/0.09/0.05, dsn=5.2.0, status=bounced (host 
mxbw-bluewin-ch.hdb-cs04.ellb.ch[195.186.227.50] said: 554 5.2.0 sc976: 
Rejected due to policy reasons - 
https://support.bluewin.ch/provider/bounce/X[redacted]== (in 
reply to end of DATA command))
Unfortunately, sc976 is not documented on 
https://postmaster.bluewin.ch/content/de/technical-details/
We can't see any general pattern behind those rejections (hosts trough our 
entire IP range are affected), switching to a different IP address for delivery 
works in most cases.

Do you see the same and have any insight what is going on here?

Greetings
Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Spam from 'Rocketmails.ch'

2020-12-28 Diskussionsfäden Peter Rohrer
On Sun, 22 Nov 2020 18:25:23 Peter Rohrer  wrote:
> On Thu, 15 Oct 2020 21:21:25 Marc SCHAEFER 
> wrote:
> > So far everyone has replied in the legal delay. I sent normal mail
> > (and then registered mail when RocketMails played the `it's not us,
> > it's RocketMountain').
> >
> > If someone knows more about the legal procedure to follow when there
> > is no reply, I would happily know about it.  
> 
> This blog post describes how a criminal complaint lead to a conviction
> by the prosecutor:
> https://www.digitale-gesellschaft.ch/2019/06/04/verurteilung-wegen-versand-von-massenmails-ohne-einwilligung-strafverfahren-gegen-schweizer-spammer/
> 
> I used this as a template to write my own criminal complaint this
> weekend. Let's see how it turns out.

I got an answer from the federal prosecutor, unfortunately I was to
late and didn't press charges within 3 months after knowing about the
offender (Art. 31 StGB). So, if you ever get into a similar situation,
don't waste to much time sending letters to the spammer and waiting for
answers.
I am not happy about that outcome, but there is not much I can do about
it.
If I understand the letter from the federal prosecutor correctly, the
violation of the data protection law was handed off to the
Stadtrichteramt Zürich. So, this is still open.

Greetings

Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Spam from 'Rocketmails.ch'

2020-11-22 Diskussionsfäden Peter Rohrer
On Thu, 15 Oct 2020 21:21:25 Marc SCHAEFER  wrote:
> If you do not get any reply after one month, I think that then it
> should be escalated to the proper authorities, as this looks a
> violation of Swiss law.

I did not get an answer, not even after a second registered letter with
return receipt (but at least I got a signed return receipt, this is
even better evidence that he received the letter).


> So far everyone has replied in the legal delay. I sent normal mail
> (and then registered mail when RocketMails played the `it's not us,
> it's RocketMountain').
>
> If someone knows more about the legal procedure to follow when there
> is no reply, I would happily know about it.

This blog post describes how a criminal complaint lead to a conviction
by the prosecutor:
https://www.digitale-gesellschaft.ch/2019/06/04/verurteilung-wegen-versand-von-massenmails-ohne-einwilligung-strafverfahren-gegen-schweizer-spammer/

I used this as a template to write my own criminal complaint this
weekend. Let's see how it turns out.

Kind Regards

Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Spam from 'Rocketmails.ch'

2020-10-15 Diskussionsfäden Peter Rohrer
On Mon, 12 Oct 2020 13:07:20 Marc SCHAEFER  wrote:
> On Mon, Oct 12, 2020 at 12:21:38PM +0200, Benoit Panizzon wrote:
> > Please contact SECO (Lena Geiser). They know 'this case' since 2017.

Are they also willing to do anything, or is it more effective to hand
over the case to the federal prosecutor?
Last time I complaint to SECO about spam from Salt (former Orange), they
played it down, saying that it was "just one mail".


> > Of course it would be very very interesting, if your data could
> > also be tracked back to a customer of Schober who had it's data
> > processed @ Schober while S.A. was part of their management.
> 
> Let's wait for Sandro Achille's reply, in a month or so.

I sent him registered letters to both his "Sandro Achilles Photography
Corporation" (in 2019) and to "ACHILLES – Management & Marketing
Consulting" (he received it about 2 Months ago) and did not get any
response so far. I also called his phone number, he claimed someone
else is handling those request for him.

Kind Regards

Peter Rohrer


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Spam from 'Rocketmails.ch'

2020-08-22 Diskussionsfäden Peter Rohrer
On Sat, 22 Aug 2020 09:28:25 Marc SCHAEFER  wrote:
> NB: I have no idea if Rocket Mountain AG, Rocket Leads AG and
> Christian Huldi has any link with rocketmails.ch, however both were
> hosted at hosttech GmbH which basically told me they wouldn't do
> anything, and told me to contact the customer: I did that, and got
> absolutely no reply in the last three weeks.

I sent an "Auskunftsbegehren" regarding Spam to the Whois address of
rocketsmails.ch in 2018, and I got a first answer by mail (from
rocketleads.ch) and later by written letter (after I send them a second
registered mail) from the Company Rocket Mails AG.
Therefore, I can confirm that rocketleads.ch and Rocket Mails AG are
the same company or had the same owners at that time.
Back then, they told me that the got the mail address from a third
party, to which I had consent into receiving advertisements. I could
not confirm or deny that claim, and therefor I didn't take further
steps, other than sending a letter to the third party, which did not
answer.
The relevant part of the letter from Rocket Mails AG was as follows:

Die Firma Rocket Mails AG fungiert als sogenannter Listbroker, das
heisst; wir nutzen Daten von Dritten (Listeignern), welche die Daten
erhoben haben und über das Werbeeinverständnis verfügen. Die
vorangehend genannten Daten (Personendaten und E-Mail Adresse) stammen
aus folgender Quelle:

[REDACTED]

Für weitere Informationen (Art der Einwilligung, IP-Adresse und
Timestamp) bitten wir Sie, sich direkt beim Listeigner
(Dateneigentümmer und Inhaber des Werbeeinverständnisses) zu melden.
Nachfolgend dürfen wir Ihnen die Kontaktdaten zukommen lassen:

[REDACTED]

Greetings

Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] TR-069 & Security / Swisscom Router

2016-03-27 Diskussionsfäden Peter Rohrer
Am Samstag, 26. März 2016 schrieb Nico Schottelius:
> we've recently audited a small network and found that the customer
> configured devices were relatively secure configured. However the
> Swisscom Router/WiFi device (Zylex P-870HN-53b) seems to have the old
> uPNP exploit with a firmware that is not being updated anymore (upnp
> was disabled though - so this is hopefully not a big issue).
> 
Be carefull with those Zyxels, the last firmware update I installed on 
the similar P-870H disabled the firewall and I ended up wit an open DNS 
resolver. It's not nice to get noticed about this by your ISP.
Don't even think about using the IPv6-stack in those devices, the built-
in "firewall" doesn't know anything about IPv6 and lets any traffic pass 
(and we are back at the open DNS resolver, it is just harder to find and 
exploit the device over IPv6).
Unfortunately, I can't recommand any other brand or device.
In general, don't disable NAT on those plastic devices, you are entering 
badly tested territory.

Greetings

Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Virtualization for Webhosters / OpenVZ

2011-05-04 Diskussionsfäden Peter Rohrer
Hi Philip

Am Mittwoch, 4. Mai 2011 schrieb Philip Iezzi:
 We're looking for a Swiss hosting provider who is actively using such
 a single kernel virtualization technology. What's your experience
 with OpenVZ?
 
OpenVZ is running stable, I can't remember any outage because of OpenVZ.

 How about resource separation of containers (VPS)? 
 
Resource separation with the old (2.6.18, working up to the Lenny 
Release) kernel is ok concerning memory, CPU-time (and number of CPU 
Cores) as well as disk space. Disk IO is a different story (I think 
fair limiting of disk IO is hard to implement). The 2.6.18 Kernel no 
longer works with squeeze.
The stock Debian kernel is somehow of a step back, at the moment there 
is no absolute (Grant only 1 core to a virtual machine) limiting of 
CPUs or CPU time. Stability is still good, I haven't seen any crash 
because of OpenVZ.

 Have  you got any experience running complete containers off a
 NFS-mounted NAS/SAN?
 
There were some bugs with NFS (leading to kernel oops) in the Debian 
kernel. Please check the bug reports for more details, this may have 
been fixed with the point release. I have no experience with NAS/SAN.

 How about performance in a web hosting environment with 
 resource peaks on various servers?
 
We don't do dynamic reallocation of virtual servers based on load or 
resource peaks, if this was your question. Without a fast Disk 
subsystem, disk IO will most likely be the limiting factor, unless your 
software needs a lot of CPU. I can't tell how well the dynamic 
provisioning of various resources works, because we don't use that (We 
dont overbook our hardware, the customer always gets what he pays for).

Greetings,
Peter


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Post from Canton de Vaud

2009-02-20 Diskussionsfäden Peter Rohrer
Hallo Pascal

Am Freitag, 20. Februar 2009 15:35 schrieb Pascal Gloor:
 Dear SwiNOGers,

 I'm working on some 'project' which could help in this case. I found
 a lawyer who's ready to support me for free. However, there's a
 little budget I cannot afford on my own. I cant explain exactly why
 on a public list (we have experienced some difficulties with that in
 the past ;)). I'm ready to explain the case in details to any person
 who's willing to support me financially in this case. To be clear and
 transparent, I need about 800CHF.

 Feel free to call me or email me about details if you're ready to
 support me for at least 100CHF.

Ich wäre evt. bereit mich zu beteiligen. Kannst du mir sagen um was es 
genau geht, bzw. was Du machen willst?

Liebe Grüsse,
Peter

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Netclean - news

2008-12-10 Diskussionsfäden Peter Rohrer
Am Mittwoch, 10. Dezember 2008 11:17 schrieb Fredy Kuenzler:
 Peter Keel schrieb:
  * on the Wed, Dec 10, 2008 at 09:54:11AM +0100, Marc Hauswirth 
wrote:
  After the presentation of Netclean whitebox at last Swinog
  meeting from Pascal Seeger and Grégoire Galland, we are pleased to
  announce that now two ISP in Switzerland are using it to filter
  their Internet access to block pedophile content.
 
  The opposite of good is good intent.

 As said earlier, IMHO the authorities should purchase the system for
 all serviceproviders. 
Why should they? They better invest that money into something usefull, 
like education, or they could lower the taxes.

 This is not a matter of marketing, this is too serious.

Too serious? Everybody really interested in that stuff will still be 
able to get it using p2p filesharing (freenet for example supports a 
darknet mode which allows you to create closed groups with encrypted 
connections and encrpyted data storage).
Everybody else will never see such content. I've seen a lot of legal 
porn advertisement when searching for technical information on the net, 
but never any single illegal picture.

Like others have mentioned, there are the usual problems of zensorship: 
You can't check if only bad stuff is being zensored (well, I think 
nobody of us would want to see that content anyway), it could be used 
to censor other content (like in that case: 
http://www.heise.de/newsticker/Schweizer-Richter-ordnet-erneut-Website-Sperrung-an--/meldung/101028).
The providers of illegal content are always faster creating new sites 
then the zensors updating their blocking list.

Today we are blaming China for their great firewall. Tomorrow they 
will tell us they are doing the same thing we are doing - blocking 
access to content which is illegal by law.

Btw: It is interesting that the press release doesn't name which 
providers are using that WhiteBox. If it is really that great, why 
don't they say who is using it?

Greetings,
Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] searching a manageable fanless gigabit switch

2008-07-12 Diskussionsfäden Peter Rohrer
Hi Mario

Am Mittwoch, 9. Juli 2008 08:22 schrieb Mario Iseli:
 what happened to you? I mean you're the guy with the tons of old
 hardware running at home and you care now about the noise of a tiny
 switch fan?

Well, I still have a few old boxes running, but the ones running 'round 
the clock are in the basement where I don't have to listen to them all 
the time. And they are not that noisy, a HP 9000/712 is quiet compared 
to my Computer.


 Maybe I was missing some news?! ;-)

I just moved to a new appartment and did not want to listen to my loud 
switch any longer. Now the fan in the Computer is getting on my 
nerves ;-)

Greetings,
Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


[swinog] searching a manageable fanless gigabit switch

2008-07-08 Diskussionsfäden Peter Rohrer
Hello

I'm looking for a manageable fanless gigabit Ethernetswitch with 
VLan-Tagging, SNMP and 16-24 port.
Unfortunately, everything I've seen so far has either no SNMP, no 
VLAN-Tagging or a noisy fan.

Do you know any such device?

Thanks,
Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Problems reaching large Websites

2008-01-28 Diskussionsfäden Peter Rohrer
Hi Mike

Am Montag, 28. Januar 2008 17:20 schrieb Mike Kellenberger:
 Anbody else having problems to reach large websites, such as
 www.microsoft.com or www.dell.com? Problems in or to the akamai
 network?

 Trying from AS13030 (Init7) here...

I am also Init7 ADSL customer, and it looks similar from my side, 
reaching microsoft or dell as well as ebay.com or ikea.com is nearly 
impossible.
I restarted my DSL-Modem and tried it on two Computers with different 
opearating systems, but it was still not working.
I now switched to my Sunrise Backup-Link over EDGE, and now everything 
seesm to work fine again (although it is a bit slow), so there must be 
a problem in the init7 network.

Greetingd
Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Justice Order to block websites

2007-12-20 Diskussionsfäden Peter Rohrer
Am Donnerstag, 20. Dezember 2007 14:59 schrieb Pascal Gloor:
  And again we'll not take any actions and this time we'll not give
  them an introduction lesson in how the internet works (which I
  tried w/o success last time.)

 Ohhh you said that on a public list ;-)

 Anyway, they should ask Fedpol to add them on their pedo-banned-url-
 list so bluewin will block it. 
 
Perfekt, that's the exact reason why I don't like censorship. You can't 
know if they only censor the really bad stuff or everything they don't 
like.

Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Windows-Pizza

2007-11-26 Diskussionsfäden Peter Rohrer
Am Montag, 26. November 2007 18:43 schrieb Andre Timmermann:
 anyone want a pizza?

 http://www.pizza-joker.com/

 You just can order a pizza if you use windows internet exploiter. If
 you dare to use another browser, you will get insulted:

I just started a Windows 2k with IE 6 in a VirtualBox to see the website 
and the site of the creators (novalku.com) the way it should look for 
the 96% which use MSIE.
Well, it is horrible, looks like it was designed in the last century 
(only without an Under Construction Button).
This must be either some stupid projekt of modern art (they advise you 
to disable the popup and phishing-protection in IE) or these guys are 
completely insane.

 My colleague told me, that this is a REAL pizza-resataurant. I wonder
 if they treat the customers the same in the restaurant;)
 
You may get kicked out of the restaurant if you dont look like the 
average Joe. ;-)

Peter
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog