- Test - lists.nanog.org

ddos from .mil, and from state.oh.us
by Eric Brunner-Williams in Portland Maine 05 Dec '04

05 Dec '04

Oki all, A month ago today Gadi was looking for a contact at US .mil, this morning I had the same need, as a node in the nipr.mil playpen was a major player in a 100+ node ddos directed at a web blog customer we host -- it had a high rate of fire, accounting for over 20% of the total POST methods. Email to the DO was a waste of time, but I did find a useful contact. One of the nodes used in today's ddos against that customer blog appeard in a seperate multi-thousand ad insert (unpaid, naturally) attack on another of our customer blogs, accounting for about half of the total POST methods. If anyone has a useful contact in the state.oh.us playpen, please drop me a line. Email since 24/Nov is unanswered. TiA, Eric

2 1

is reverse dns required? (policy question)
by Greg Albrecht 04 Dec '04

04 Dec '04

i'm currently having an argument with management. we've recently gotten an influx of customer request for us to setup reverse dns for the customer's mail servers, since most sites (aol, freebsd, others) require it to accept mail, and reject mail if it is not from a server with reverse dns (i'm aware this is an emerging trend). because of previous management decisions, we were never directed to setup any reverse dns records for any customers unless solicited to do so by the customer. however, management has taken it upon themselves to charge our customers for every reverse dns request they submit to us. my argument to management is that it's good practice to set this up even before customer solicitation, and to do specific host names per customer specification, completely with-out cost. my question is: are we obligated, as a user of ARIN ip space, or per some BCP, to provide ad-hoc reverse dns to our customers with-out cost, or without financial obligation. thanks!, -xs -- Greg Albrecht (gba(a)undef.net) www.undef.net * 1-415-794-5944

15 22

RE: AOL Abuse/Email contact
by James Ashton 04 Dec '04

04 Dec '04

I have had great luck in the past contacting there Postmasters. The link is hard to dig up on there site though. http://postmaster.info.aol.com/contact/ Give them a call. They are very good to deal with. James Ashton -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of JDeane(a)sungardfutures.com Sent: Tuesday, November 30, 2004 6:07 PM To: nanog(a)merit.edu Subject: AOL Abuse/Email contact If someone from AOL abuse and or email group could contact me off list to discuss mail delivery issues, it would be most appreciated. Attempts to resolve issues via generic contacts have proved fruitless. Regards, Jade Jade E. Deane Senior Network Engineer SunGard Futures Systems SunGard Systems International, Inc. jdeane(a)sungardfutures.com +1 (312) 577-6100

1 0

Microsoft suing spammers....Tilting at windmills?
by Fergie (Paul Ferguson) 04 Dec '04

04 Dec '04

Given the discussion here on the Lycos anti-spam campaign, it is also interesting to note that Microsoft is taking a more "direct" approach to curtail spammer activity -- suing them. As reported on the NewsFactor Network, "Microsoft has filed seven more lawsuits against spammers, this time targeting those who violate the 'brown-paper wrapper' provision of the CAN-SPAM law, which sets rules for sexually oriented e-mail solicitations." Story: http://www.newsfactor.com/story.xhtml?story_title=Microsoft-Sues-More-Spamm… It makes one wonder if an entity with as deep pockets and adept legal staff might actually make an impact on spammers, or if they are simply tilting at windmills. - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

4 3

APRICOT 2005 in Kyoto, Japan
by Philip Smith 03 Dec '04

03 Dec '04

Hi everyone, This is to let you know that the registration for APRICOT 2005 in Kyoto, Japan, from 18th to 25th February 2005 is now open. APRICOT is the Asia Pacific region's Internet operations and technology conference, and consists of workshops, tutorials, conference, as well as the 6 monthly APNIC meeting. Full information about APRICOT 2005 can be had at www.2005.apricot.net. Registration and accommodation information is at: www.2005.apricot.net/registration.html www.2005.apricot.net/accommodation.html You are encouraged to register as soon as possible as the early bird registration discount finishes on the 12th of January. Hope to see you in Kyoto early next year! philip --

1 0

Is the Internet a Phone Company
by Ted Fischer 03 Dec '04

03 Dec '04

</lurk> All, Right from the Horse's Mouth: Quote: FCC Chairman Michael K. Powell applauded the Supreme Court's move to hear the case. "The 9th Circuit's decision would have grave consequences for the future and availability of high-speed Internet connections in this country," he said in a statement. "High-speed Internet connections are not telephones." Unquote: Context: Mr. Powell's statement re: "The Supreme Court said Friday it will consider whether Internet providers should be allowed to sell their high-speed service over the cable television system." Full article: http://www.msnbc.msn.com/id/6645391/ Although I am not well versed in the particulars of this specific case, the statement itself would seem to have broad operational ramifications on how "High-speed Internet connections" are built marketed, and priced - at least in the U.S. The pressure for "extra-net" (if you'll pardon the marketing term) VOIP is immense, for example. I would appreciate The List's - US as well as Non-US - reaction to this statement. It is the first time I have seen it so explicitly stated by someone who's opinion on this matter carries more than just a little weight. Ted Fischer <lurk>

1 0

RE: [OT] Re: Banned on NANOG
by Hannigan, Martin 03 Dec '04

03 Dec '04

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] > Sent: Friday, December 03, 2004 3:31 PM > To: nanog(a)merit.edu > Subject: Re: [OT] Re: Banned on NANOG > [snip] > > This is my first post directly to the NANOG list. Ever. I'm not sure why you chose this thread as your sunshine, but welcome. > A post earlier this week even showed one use attempting to > escalate past The early attempt this week was, at best, suspect. It's not too hard to figure out how to reach people in Merit. [ hint: www ] Can we get back to operations? Can we ever get back to operations? -M<

2 1

RE: Lycos pulls anti-spam screensaver from site
by Hannigan, Martin 03 Dec '04

03 Dec '04

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] > Sent: Friday, December 03, 2004 3:46 PM > To: nanog(a)merit.edu > Subject: Re: Lycos pulls anti-spam screensaver from site > > > > At the moment the screensaver does nothing. It blanks to grey and > displays the message "Stay Tuned".... that's really about it. > (Of course > it still connects to the "Makelovenotspam.com" site, but that isn't > really the point). > > It wouldn't surprise me if the screensaver, or a modified > version, went > back into use at a future date. > There continues to be activity surrounding the site and a high volume of press. -The infrastructure is being moved around -Some additional hosts have been added -Routing to avoid GBLX appear in place -M<

1 0

Re: Lycos pulls anti-spam screensaver from site
by Fergie (Paul Ferguson) 03 Dec '04

03 Dec '04

I was thinking the same thing.... Plus, "Stay Tuned" doesn't mean that they necessarily pulled the screensaver permanently.... - ferg -- Gadi Evron <ge(a)linuxbox.org> wrote: > "Lycos Europe appeared to have pulled a controversial > anti-spam screensaver program from its site on Friday, > after coming under fire from both security experts and > the spammers themselves." > Okay. Now what about all those users who have this thing installed? Do they DDoS the same IP's for all eternity? Gadi. -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

3 2

New Force10 List (and other puck resources)
by Jared Mauch 03 Dec '04

03 Dec '04

Just as a FYI to a number of people out there, I do periodically create new lists on puck.nether.net, including a new Force10 related list. For those of you that are interested, you can find subscription information here: http://puck.nether.net/mailman/listinfo/force10-nsp You may be interested in other lists that I presently host as well, covering a variety of network devices, and my inet-ops list which is available for internet operators to discuss things that are considered off-topic here. The link to those lists can be easily found by removing the trailing part of the url.. for those non-techie people here, that would be: http://puck.nether.net/mailman/listinfo I encourage those that are interested in the Bogon filtering to subscribe to the bogon-announce list. Enjoy! - Jared -- Jared Mauch | pgp key available via finger from jared(a)puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

1 0