June 2003 - Test - lists.nanog.org

RE: National Do Not Call Registry has opened
by Mike Damm 28 Jun '03

28 Jun '03

*sigh* So why did Richard Callahan even bother soliciting advice the first place? They are demonstrating they have no concern in operating a decent mail system, even after many kind folks here provided them all the info they needed. I've had two confirmations dropped so far today. Bad in-addr and 'click here' seem to have tipped the scales. To save you all some keystrokes... Donotcall.gov has no MX records. No reverse DNS on any of their outbound mail boxes. And they obviously are not processing bounces/complaints/etc. since nothing on that netblock has port 25 open. -Mike --- Michael Damm, MIS Department, Irwin Research & Development V: 509.457.5080 x298 F: 509.577.0301 E: miked(a)irwinresearch.com -----Original Message----- From: John R Levine [mailto:johnl@iecc.com] Sent: Thursday, June 26, 2003 10:53 PM To: nanog(a)nanog.org Subject: National Do Not Call Registry has opened The domain is donotcall.gov, IP range is 206.16.196.192/26. They all seem to have the same subject line. Subject: National Do Not Call Registry - Complete Your Registration DCC checksums (already have a count of 25 even though it's only been open for an hour or so and it's the middle of the night): ok fuz1 ac8763a8 a9e8d829 5e8a506b 1d6ac5e5 ok fuz2 bc65f25a 2c08ccfd 5b8b6e2c 3c806c1d They don't quite have all the bugs out. I gave them three phone numbers, but they only sent two confirmations. Regards, John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for Dummies", Information Superhighwayman wanna-be, http://iecc.com/johnl, Sewer Commissioner "More Wiener schnitzel, please", said Tom, revealingly. ---------- Forwarded message ---------- Return-Path: <Register(a)donotcall.gov> Delivered-To: johnl(a)iecc.com Received: (qmail 3643 invoked by uid 100); 27 Jun 2003 05:12:01 -0000 Received: (qmail 3518 invoked from network); 27 Jun 2003 05:09:30 -0000 Received: from unknown (HELO DoNotCall.GOV) (206.16.196.221) by mail.iecc.com with SMTP; 27 Jun 2003 05:09:30 -0000 Received: from donotcall.gov ([206.16.196.208]) by DoNotCall.GOV with Microsoft SMTPSVC(5.0.2195.5329); Fri, 27 Jun 2003 01:05:04 -0400 Received: from mail pickup service by donotcall.gov with Microsoft SMTPSVC; Fri, 27 Jun 2003 01:09:29 -0400 From: <Register(a)donotcall.gov> To: <donotcall(a)johnlevine.com> Subject: [donotcall(a)johnlevine.com] National Do Not Call Registry - Complete Your Registration Date: Fri, 27 Jun 2003 01:09:29 -0400 Message-ID: <058d01c33c6a$49752600$d0c410ce@8798WWW3> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft CDO for Windows 2000 Thread-Index: AcM8akl1m6Ypbr9BRGKj8OREFMsymw== Content-Class: urn:content-classes:message X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-OriginalArrivalTime: 27 Jun 2003 05:09:29.0515 (UTC) FILETIME=[49941FB0:01C33C6A] X-DCC-IECC-Metrics: tom.iecc.com 1107; Body=1 Fuz1=7 Fuz2=7 X-Spam-Status: No, hits=-5.6 required=7.0 tests=BAYES_01,CLICK_BELOW,NO_REAL_NAME version=2.53 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp) Click here [ url snipped ] to complete your request to register your phone number ((607) 330-5711) on the National Do Not Call Registry. Important: You must respond to this email by clicking the link within 72 hours for your registration to be successful. Once you have registered, your phone number registration will be effective for 5 years. It will be illegal for most telemarketers to call you, and you will be able to file a complaint if a telemarketer does call you. The website www.donotcall.gov provides information about filing a complaint. Important: After you click on the link, print the web page and keep it for your records. **************************************************************************** *************************************************** Please do not reply to this message as it is from an unattended mailbox. Any replies to this email will not be responded to or forwarded. This service is used for outgoing emails only and cannot respond to inquiries.

8 8

RE: National Do Not Call Registry has opened
by LeBlanc, Robert 28 Jun '03

28 Jun '03

This came in from CBS Market Watch: YAHOO BLOCKS FTC DO-NOT-CALL MAIL SAN FRANCISCO (CBS.MW) -- Isn't it ironic. In the war against unsolicited e-mail, automated Spam blockers are actually getting in the way as they block legitimate mail from the government. The federal government on Friday began accepting consumers' requests to be put on its "Do-Not-Call" registry, a nationwide listing of people who don't want to be solicited at home via calls or e-mails. The Federal Trade Commission is responsible for administering the program. A person who wants to be included on the list will receive an e-mail from the government, then must send back an e-mail reply as confirmation. But a problem's arisen, as at least one major processor of e-mail -- Yahoo -- is blocking the confirmation e-mail, according to NetFrameworks, a tiny 25-person security company. NetFrameworks monitors Spam control mechanisms from the largest mail carriers, like Yahoo (YHOO), America Online and Microsoft (MSFT). "The irony of it is that the confirmation e-mail is being blocked by Yahoo, and therefore you will not receive the confirmation mail," said Eric Greenberg, chief technology officer of NetFrameworks and a former product manager for security at Netscape, now part of the AOL Time Warner (AOL) empire. "It's very difficult to make the technology work... Spam blockers are automated and the software rules are arbitrary," he said. A decade in the making, the federal do-not-call rule officially takes effect on Oct. 1. Companies that call phone users who are in the registry will be liable for steep fines -- as much as $11,000 per call. As of 10:30 a.m. Eastern time, 250,000 phone numbers had been registered, according to the FTC. _______________________________________________________________________

4 3

RE: National Do Not Call Registry has opened
by Callahan, Richard M, SOLGV 27 Jun '03

27 Jun '03

Ladies and Gentlemen, This has been an extremely difficult day for me personally and professionally due to many issues we had. Without going into the painful details, let me assure the community my original post was for exactly for the reason I posted - and we do indeed know how to run a standards compliant mail system. A side effect to the problems encountered was an inability to send a valid IP address among other things to operate the mail system and instead sending a static LB IP address, which effectively made all our mail look, as Mr.Sprunk so eloquently phrased, suspicious looking. We are over the hump - lost a tremendous amount of credibility and the opportunity to show "the government at work". The FTC has put their all into this project and the associated laws which I would hope all of you anti-spam police would appreciate. My apologies to the community for all the trash email this fiasco has produced, but more so to my customer for not delivering the quality they deserve. -----Original Message----- From: Stephen Sprunk [mailto:stephen@sprunk.org] Sent: Friday, June 27, 2003 6:10 PM To: LeBlanc, Robert Cc: Callahan, Richard M, SOLGV; North American Noise and Off-topic Gripes Subject: Re: National Do Not Call Registry has opened Thus spake "LeBlanc, Robert" <Robert.LeBlanc(a)savvis.net> > "It's very difficult to make the technology work... Spam blockers are > automated and the software rules are arbitrary," he said. It's a shame the press are putting the blame for this on anti-spam software, as it's clear that the DoNotCall.gov people have brought the problem on themselves by not running a standards-compliant mail system. What's worse is they knew this was coming and didn't do anything to prevent it! It appears Mr. Callahan's message to nanog wasn't to look for advice on how not to trigger spam filters -- it was to beg us to add his systems to our whitelists so his suspicious-looking mail would go through. Looks like a case of "Good enough for government work" in action. S Stephen Sprunk "God does not play dice." --Albert Einstein CCIE #3723 "God is an inveterate gambler, and He throws the K5SSS dice at every possible opportunity." --Stephen Hawking

4 3

dialup/dsl/cable rbl recommendations
by Charles Sprickman 27 Jun '03

27 Jun '03

Hi, I'm in the process of moving our userbase to a new mailserver, but in the meantime limping along on old hardware. In an effort to get some rudimentary spam blocking in place, I've added a number of rbls. So far this has helped, but I'm still seeing a ton of direct-to-mx junk coming in from adsl and cable users. This is with the following rbls that are supposed to target dial/dsl/cable dynamic IPs: dun.dnsrbl.net dynablock.easynet.nl dialups.visi.com (mirror of PADL list) Are there any other "dynablocker" type lists? I still see a large amount of spam coming from US cable and dsl IPs, and the hit rates on the above lists are relatively small. I'd appreciate any pointers, especially from those actively using other lists. (But please restrain yourselves from commenting on the validity of blocking end-user IPs - I won't be held responsible for any ensuing week-long flamefest) Thanks, Charles -- Charles Sprickman spork(a)inch.com

1 0

announcing ix-chicago - Chicago area Internet exchange list
by John Kristoff 27 Jun '03

27 Jun '03

Let's see how this goes. <http://ntgrd.depaul.edu/pipermail/ix-chicago/2003-June/000000.html> John

1 0

AS-Tree Utility
by Malayter, Christopher 27 Jun '03

27 Jun '03

Hello All, I'm curious if anyone could point me to a utility for AS-Tree mapping from a routing table output? I searched the archive a bit, and didn't find anything. Thanks ahead! -Chris/AS4181

4 4

Zebra
by Niaz, Wajahat 27 Jun '03

27 Jun '03

Hi all Does anyone know how to install and use zebra? I installed it on Mandrake but its not working. Maybe i am missing some piece of puzzle. Please reply offline thanks -ali

1 0

Getting NS host reports
by Charles Sprickman 27 Jun '03

27 Jun '03

Hello, Sorry to ask here, but I assume some number of you must do this regularly... I need to get what in the old days was called a "host report". This was something that NetSol used to do on request, and it was basically a list of all domains registered with your nameservers. Is this still available anywhere? Thanks, Charles -- Charles Sprickman spork(a)inch.com

2 2

route-views now present at NSPIXPII
by David Meyer 27 Jun '03

27 Jun '03

Greetings, route-views (AS6447) is pleased to announce our presence at NSPIXPII (202.249.2.166), courtesy of Akira Kato and WIDE. The route-views project operates BGP route collectors that provide global routing data to both operator and research communities. Our web pages (http://www.routeviews.org/) can provide further background on the route-views project, the services we provide, and some of the research that has been based on the data collected. route-views is interested in local BGP peering (non-multi-hop, or so-called) with all of the ASes present at NSPIXPII. Those who would like more information or are willing to provide their view of the global routing table, please contact us at help(a)routeviews.org. Note that we do not announce any prefixes or use any received prefixes to route traffic; this is purely a data collection effort and looking glass-like operational tool (via telnet to a cisco-like user interface). Thanks, The route-views staff

1 0

Re: Don't call registry off the map?
by Steven M. Bellovin 27 Jun '03

27 Jun '03

In message <20030627165622.GA13781(a)semihuman.com>, Chris Woodfield writes: > > >Making a telemarketing call to a cellphone is already illegal. I think it's= > under the=20 >same law that forbids junk faxes. It's a different law, but yes, both are illegal. Of course, my home fax machine got a junk fax just two days ago. Last time that happened, I filed a formal complaint with the FCC. See http://www.junkfax.org for more information. --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book)

1 0