- Test - lists.nanog.org

RE: short Botnet list and Cashing in on DoS
by Drew Weaver 13 Oct '04

13 Oct '04

b) IRC is a haven for these people, unfortunately networks like Undernet take it a step further by providing channel services and host hiding so that not only the people behind the DDoS are hidden, but so are the bots themselves. The people running the network fear retaliation too much to do anything about it. === The sad thing is that IRC has actual positive uses for sharing information; look at the various help channels (especially on a net like freenode) for everything from Linux to math to all different types of programming languages. That's what a lot of people don't understand when they examine the problem of IRC and botnets, is that YES it has huge issues but it has legitimate (albeit very under-proportionate to the number of non-legitimate) uses and users. -Drew

21 24

yahoo abuse contact please
by Eliot Lear 12 Oct '04

12 Oct '04

Anyone got one? Amusingly, the search engine these guys run can't seem to provide me this small bit of information. Thanks in advance, Eliot

4 3

old sitefinder address is back
by Petri Helenius 12 Oct '04

12 Oct '04

Now that verisign is reusing the ex-sitefinder IP address, has anyone done studies if connectivity to that is limited by firewall rules and such? Pete

1 0

RE: yahoo abuse contact please
by Timothy B. Stiles 12 Oct '04

12 Oct '04

Hmm, Searching for Yahoo Abuse seems to work for me. Tim -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Eliot Lear Sent: Tuesday, October 12, 2004 4:23 AM To: nanog(a)merit.edu Subject: yahoo abuse contact please Anyone got one? Amusingly, the search engine these guys run can't seem to provide me this small bit of information. Thanks in advance, Eliot

1 0

Any BBCom guys around?
by Bubba Parker 12 Oct '04

12 Oct '04

We seem to be having a problem with BBCom de-announcing one of our /24's for a customer (209.218.47.0). This is about the third time it has happened in the last two days, and I'm starting to wonder. They keep "fixing it" each time we call, but what is going on? Thanks. -- Bubba Parker sysadmin(a)citynetwireless.net CityNet LLC http://www.citynetinfo.com/

1 0

RE: yahoo abuse contact please
by Josh Duffek 12 Oct '04

12 Oct '04

http://abuse.yahoo.com/ ? josh > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of > Eliot Lear > Sent: Tuesday, October 12, 2004 6:23 AM > To: nanog(a)merit.edu > Subject: yahoo abuse contact please > > > Anyone got one? Amusingly, the search engine these guys run can't seem > to provide me this small bit of information. > > Thanks in advance, > > Eliot

2 1

deprecating BCP38 and similar
by Edward B. Dreger 12 Oct '04

12 Oct '04

I think I'll change my position on BCP38. It's pointless to try blocking spoofed source addresses because: * It doesn't solve every single problem * It means more effort for service providers * It requires more CPU processing power * Using it will generate smarter "black hats". I also think everyone should drop all forms of IP ACLs and password checking. Neither of those have solved every Internet problem, they require more effort and CPU, and smarter crackers have surfaced as a result of their deployment. These measures are ineffective, and it is silly to waste time with them. Anyone from Microsoft listening? I suggest you terminate your Trustworthy Computing Initiative. Not every problem is caused by a buffer overrun or race condition, and you're wasting billions of dollars. I suggest you post regularly to NANOG, helping educate the masses that anything less than a silver bullet is wasteful. Eddy, who hopes everyone recognizes hyperbole and sarcasm -- Everquick Internet - http://www.everquick.net/ A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/ Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 785 865 5885 Lawrence and [inter]national Phone: +1 316 794 8922 Wichita _________________________________________________________________ DO NOT send mail to the following addresses: davidc(a)brics.com -*- jfconmaapaq(a)intc.net -*- sam(a)everquick.net Sending mail to spambait addresses is a great way to get blocked.

2 1

Guts (Was: Drivel about BCP38, et al.)
by Fergie (Paul Ferguson) 12 Oct '04

12 Oct '04

And one more thing: What happened to the engineers the I once knew and respected? Running networks requires guts these days, and I wish I knew where to find them. I'm so saddened to hear excuses, instead of the engineering ethos I once held in such high regard. The Internet has almost becoem unusable because of this poor state of affairs -- the dispruptors have beaten you? Reluctantly, sadly, - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

Re: BCP38 making it work, solving problems
by Fergie (Paul Ferguson) 11 Oct '04

11 Oct '04

True, but yet another cop out. If you're not part of the solution, ..... - ferg -- Dan Hollis <goemon(a)anime.net> wrote: On Mon, 11 Oct 2004, Fergie (Paul Ferguson) wrote: > I wrote it, I stand beside it. I'm sick of hearing why people > haven't implemented it yet -- it's almost five years later > and there's simply no excuse. It's sickening. it's cheaper to ignore bcp38 than to implement it. operators are reactive to abuse, not proactive. though this is slowly changing as abuse becomes a significant % of network traffic. -Dan -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

Re: Microsoft problems?
by Timo Mohre 11 Oct '04

11 Oct '04

Joe Johnson wrote: > I got some sort of announcement popup on Gaim from MSN that said they > would be going down for 5 minutes. That was this morning at about 11-ish > (Central time). Came back after 2 minutes and has been fine since. > > > Well... all I can say is that it's been down all day and is still down... as seen from AS12312, AS3257 Routing OK, but "Service not available"... Would be nice to get something more detailed from MSN than this website stating "Service is down"... Kind regards, Timo

4 3