[swinog] Bluewin dynamic IP-ranges
Hi Can someone from Bluewin/Swisscom please provide me with a list of all possible dynamic IP-ranges Bluewin offers to its customers? I need this for a firewall rule that should give access to a service for all Bluewin customers. Thanks a lot. Regards, Philip ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
Am 07.03.2011 13:02, schrieb Philip Iezzi: Can someone from Bluewin/Swisscom please provide me with a list of all possible dynamic IP-ranges Bluewin offers to its customers? I need this for a firewall rule that should give access to a service for all Bluewin customers. 'sh ip bgp regexp _44038_' would help, I assume. But note there are plenty of more-specifics for traffic engineering. F. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
>'sh ip bgp regexp _44038_' would help, I assume. But note there are plenty >of more-specifics for traffic engineering. actually you get too much - not only bluewin ,-) -steven ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
Am 09.03.2011 08:02, schrieb steven.glog...@swisscom.com: 'sh ip bgp regexp _44038_' would help, I assume. But note there are plenty of more-specifics for traffic engineering. actually you get too much - not only bluewin ,-) ... and after the next Swisscom reorganisation you get less if you stick to AS44038 *scnr* F. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
On 03/ 7/11 01:02 PM, Philip Iezzi wrote: Hi Can someone from Bluewin/Swisscom please provide me with a list of all possible dynamic IP-ranges Bluewin offers to its customers? I need this for a firewall rule that should give access to a service for all Bluewin customers. Hi Philip If you're providing a service for all Bluewin customers, I assume that the project partner is Swisscom. So I'm your project partner within Swisscom can give you the desired IP range information. Kind regards Stefan Rothenbuehler System Engineer UNIX Swisscom (Schweiz) AG ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
On 03/ 9/11 04:28 PM, Stefan Rothenbuehler wrote: So I'm *sure* your project partner within Swisscom can give you the desired IP range information. ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
Hello * on the Wed, Mar 09, 2011 at 04:28:34PM +0100, Stefan Rothenbuehler wrote: > If you're providing a service for all Bluewin customers, I assume > that the project partner is Swisscom. > So I'm your project partner within Swisscom can give you the desired > IP range information. You might be shocked to hear that it's possible that an ISP wants to whitelist all Bluewin-Ranges *despite* having nothing to do with Swisscom or Bluewin itself. In fact, we also have the same issue; we need to firewall something, but our customer, which happens to use a dynamic IP in the Swisscom/Bluewin range, needs to have access. And its far better to allow all your dynamic IP-ranges than to allow the rest of the world as well. Cheers Seegras -- "Those who give up essential liberties for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin "It's also true that those who would give up privacy for security are likely to end up with neither." -- Bruce Schneier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
Dear all Since our IP-addresses are not a secret, I can deliver them on request. We are thinking about a separate webpage where we publish our customer-ranges. There are more and more such requests from customers/partners/providers for this. Cheers, Günti |-Original Message- |From: swinog-boun...@lists.swinog.ch [mailto:swinog- |boun...@lists.swinog.ch] On Behalf Of Peter Keel |Sent: Tuesday, March 15, 2011 9:44 AM |To: Stefan Rothenbuehler |Cc: swinog@lists.swinog.ch |Subject: Re: [swinog] Bluewin dynamic IP-ranges | |Hello | |* on the Wed, Mar 09, 2011 at 04:28:34PM +0100, Stefan Rothenbuehler |wrote: |> If you're providing a service for all Bluewin customers, I assume |> that the project partner is Swisscom. |> So I'm your project partner within Swisscom can give you the desired |> IP range information. | |You might be shocked to hear that it's possible that an ISP wants to |whitelist all Bluewin-Ranges *despite* having nothing to do with |Swisscom or Bluewin itself. | |In fact, we also have the same issue; we need to firewall something, |but our customer, which happens to use a dynamic IP in the |Swisscom/Bluewin |range, needs to have access. And its far better to allow all your |dynamic |IP-ranges than to allow the rest of the world as well. | |Cheers |Seegras |-- |"Those who give up essential liberties for temporary safety deserve |neither liberty nor safety." -- Benjamin Franklin |"It's also true that those who would give up privacy for security are |likely to end up with neither." -- Bruce Schneier | | |___ |swinog mailing list |swinog@lists.swinog.ch |http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog smime.p7s Description: S/MIME Cryptographic Signature ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
Hello * on the Tue, Mar 15, 2011 at 10:28:34AM +0100, robert.guentensper...@swisscom.com wrote: > Since our IP-addresses are not a secret, I can deliver them on request. > We are thinking about a separate webpage where we publish our customer- > ranges. Good idea. Right now, we just whitelist the whole AS44038-Range; but of course knowing specifically the dynamic-ranges would be useful. Cheers Seegras -- "Those who give up essential liberties for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin "It's also true that those who would give up privacy for security are likely to end up with neither." -- Bruce Schneier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] Bluewin dynamic IP-ranges
On 2011-Mar-15 10:28, robert.guentensper...@swisscom.com wrote: > Dear all > > Since our IP-addresses are not a secret, I can deliver them on request. > We are thinking about a separate webpage where we publish our customer-ranges. > There are more and more such requests from customers/partners/providers for > this. There is this great thing called RPSL that can be used for this. Just create a set of addresses with a certain name and provide people with that name. Then you just have to tell people to reload that set every X days and presto, everybody has correct info. (Indeed, you don't have to use every data point in RIPE IRR for routing, one can also use it for documenting these kind of things ;) Greets, Jeroen ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
