- Test - lists.nanog.org

RE: Strange public traceroutes return private RFC1918 addresses
by Michael.Dillon＠radianz.com 03 Feb '04

03 Feb '04

>> A more important question is what will happen as we move out >> of the 1500 byte Ethernet world into the jumbo gigE world. It's >> only a matter of time before end users will be running gigE >> networks and want to use jumbo MTUs on their Internet links. >The performance gain achieved by using jumbo frames outside of very >specific LAN scenarios is highly questionable, Did I say anything about performance? In any case, a lot of packets on the Internet have to traverse LANs at either edge and if jumbo packets can help on the LAN then people will use them. >and they're still not standardized. Precisely my point. We can do jumbo MTUs of various sizes today but we need to discuss some standard ways of setting these MTUs so that we avoid MTU bottlenecks in the core. That way PMTUD will continue to be a non-issue. > Are "jumbo" Internet MTUs seen as a pressing issue by >ISPs and vendors these days? Some people like to do forward planning instead of waiting until an issue hits them in the face. By definition, forward planning will never be dealing with pressing issues. --Michael Dillon

1 0

Strange public traceroutes return private RFC1918 addresses
by Brian (nanog-list) 03 Feb '04

03 Feb '04

Any ideas how (or why) the following traceroutes are leaking private RFC1918 addresses back to me when I do a traceroute? Maybe try from your side of the internet and see if you get the same types of responses. It's really strange to see 10/8's and 192.168/16 addresses coming from the public internet. Has this phenomenon been documented anywhere? Connectivity to the end-sites is fine, it's just the traceroutes that are strange. (initial few hops sanitized) [brian@testbox1 /]# traceroute www.ibm.com traceroute: Warning: www.ibm.com has multiple addresses; using 129.42.17.99 traceroute to www.ibm.com (129.42.17.99), 30 hops max, 38 byte packets 1 (---.---.---.---) 2.481 ms 2.444 ms 2.379 ms 2 (---.---.---.---) 17.964 ms 17.529 ms 17.632 ms 3 so-1-2.core1.Chicago1.Level3.net (209.0.225.1) 17.891 ms 17.985 ms 18.026 ms 4 so-11-0.core2.chicago1.level3.net (4.68.112.194) 18.272 ms 18.109 ms 17.795 ms 5 so-4-1-0.bbr2.chicago1.level3.net (4.68.112.197) 17.851 ms 17.859 ms 18.094 ms 6 so-3-0-0.mp1.stlouis1.level3.net (64.159.0.49) 23.095 ms 22.975 ms 22.998 ms 7 ge-7-1.hsa2.stlouis1.level3.net (64.159.4.130) 23.106 ms 23.237 ms 22.977 ms 8 unknown.level3.net (63.20.48.6) 24.264 ms 24.099 ms 24.154 ms 9 10.16.255.10 (10.16.255.10) 24.164 ms 24.108 ms 24.105 ms 10 * * * [brian@testbox1 /]# traceroute www.att.net traceroute: Warning: www.att.net has multiple addresses; using 204.127.166.135 traceroute to www.att.net (204.127.166.135), 30 hops max, 38 byte packets 1 (---.---.---.---) 2.404 ms 2.576 ms 2.389 ms 2 (---.---.---.---) 17.953 ms 18.170 ms 17.435 ms 3 500.pos2-1.gw10.chi2.alter.net (63.84.96.9) 18.077 ms * 18.628 ms 4 0.so-6-2-0.xl1.chi2.alter.net (152.63.69.170) 18.238 ms 18.321 ms 18.213 ms 5 0.so-6-1-0.BR6.CHI2.ALTER.NET (152.63.64.49) 18.269 ms 18.396 ms 18.329 ms 6 204.255.169.146 (204.255.169.146) 19.231 ms 19.042 ms 18.982 ms 7 tbr2-p012702.cgcil.ip.att.net (12.122.11.209) 20.530 ms 20.542 ms 23.033 ms 8 tbr2-cl7.sl9mo.ip.att.net (12.122.10.46) 26.904 ms 27.378 ms 27.320 ms 9 tbr1-cl2.sl9mo.ip.att.net (12.122.9.141) 27.194 ms 27.673 ms 26.677 ms 10 gbr1-p10.bgtmo.ip.att.net (12.122.4.69) 26.606 ms 28.026 ms 26.246 ms 11 12.122.248.250 (12.122.248.250) 27.296 ms 28.321 ms 28.997 ms 12 192.168.254.46 (192.168.254.46) 28.522 ms 30.111 ms 27.439 ms 13 * * * 14 * * *

7 7

Re: updated root hints file
by Doug Barton 03 Feb '04

03 Feb '04

Randy Bush wrote: > let's face it. we should be looking at the front page > of the <http://iana.org/> site to find root hints. there > we find <http://www.iana.org/domain-names.htm>, which seems > to be missing a link to the signed root hints. > > iana, could you please fix that? thanks. Good idea. I had that in mind along with some other changes for later this quarter, but given the amount of attention this topic is generating, I'll try to get something up asap. Thanks, Doug -- Doug Barton General Manager, The Internet Assigned Numbers Authority

1 0

wildly successful
by bill 03 Feb '04

03 Feb '04

so... funding found. nanog bound. ... hotel sold out? wow! --bill

1 0

Unbelievable Spam.
by Ejay Hire 03 Feb '04

03 Feb '04

Personally, I don't like spam, but I tolerate the messages that slip through to my mailbox as a penalty for my own laziness in not tightening down my spam rules. Today I got one that I couldn't believe. --snip-- Spam Hosting - from 20$ per mounth. Fraud Hosting - from 30$ per mounth. Stoln Credit Cards, Fake ID, DL's. Spam For free only from 1.02.2004 to 5.02.2004. --snip-- It's just wrong in my opinion, and exacerbated by the fact that it was spammend to our abuse account. Their /24 just fell off of my piece of the internet. Have I just been blind to this all along, or are the spammers getting bolder? -Ejay

8 8

Re: Need abuse contact for Yahoo Hostinng
by Christopher X. Candreva 02 Feb '04

02 Feb '04

On Mon, 2 Feb 2004, Barnabas Toth wrote: > Maybe you should try to contact AOL abuse instead? I know, I know... Just > a though. Thanks to those who replied. I've been contacted directly by an AOL rep (who the site pretended to be), and an FBI agent. Interestingly not a peep from Yahoo. Sigh. ========================================================== Chris Candreva -- chris(a)westnet.com -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/

1 1

other virus damages/costs.....(hello skynet.be ?)
by Mike Tancsa 02 Feb '04

02 Feb '04

Looking at my disk stats, my mail storage spool has grown by 15% in the past week not due the deluge of viruses which I can block and reject, but in large part to those idiotic "Hi, I am sorry in a happy idiotic way to inform you that the message you sent has a virus" messages.... As almost all of them forge their email address, what is the point of warning the "sender." Even better, I wake up this am to 285 (and growing) messages below telling me that someone at skynet is trying to send me a virus message and it cc's 64 other people. Nice. ---Mike >From: "Skynet Mail Protection" <support(a)skynet.be> >To: gbs-vossem(a)pi.be >To: timofeev(a)granch.ru >To: chris(a)aims.com.au >To: dcs(a)newsguy.com >To: imp(a)harmony.village.org >To: ted(a)ness.plymouth.edu >To: deepak(a)ai.net >To: bmilekic(a)technokratis.com >To: randy(a)psg.com >To: sthaug(a)nethelp.no >To: shelton(a)sentry.granch.ru >To: danny_j_mitzel(a)yahoo.com >To: tinguely(a)web.cs.ndsu.nodak.edu >To: charon(a)hell.gr >To: jesper(a)skriver.dk >To: anandfranklin(a)hotmail.com >To: nascar24(a)home.nl >To: c.prevotaux(a)hexanet.fr >To: reichert(a)numachi.com >To: andy(a)tecc.co.uk >To: provos(a)citi.umich.edu >To: rtek(a)dolfijntje.nl >To: jack_xiao99(a)hotmail.com >To: mark.blackman(a)netscalibur.co.uk >To: gunther(a)aurora.regenstrief.org >To: s_bschmi(a)ira.uka.de >To: vova(a)express.ru >To: vlad(a)ariel.phys.wesleyan.edu >To: lord(a)4jon.com >To: assar(a)freebsd.org >To: peter.jeremy(a)alcatel.com.au >To: chaegle(a)mediaone.net >To: brad(a)wcubed.net >To: ewiz(a)mail.dotcom.fr >To: freedom(a)csie.nctu.edu.tw >To: oberman(a)es.net >To: wes(a)softweyr.com >To: julian(a)elischer.org >To: iedowse(a)maths.tcd.ie >To: sroberts84(a)hotmail.com >To: maddave(a)suxx.eu.org >To: ambrisko(a)ambrisko.com >To: ari(a)suutari.iki.fi >To: bonnetf(a)plonk.esiee.fr >To: lucky(a)land3.nsu.ru >To: ume(a)freebsd.org >To: crewking(a)buckeye-express.com >To: bright(a)sneakerz.org >To: tlambert(a)primenet.com >To: gwford(a)home.com >To: vlad(a)infonet.com.ua >To: freebsd-lists-for-dayan-only-owner(a)egroups.co.uk >To: kimch(a)etri.re.kr >To: chris(a)calldei.com >To: peter(a)guest-tek.com >To: sudish(a)corp.earthlink.net >To: peter(a)wemm.org >To: cristjc(a)earthlink.net >To: yar(a)freebsd.org >To: shalunov(a)internet2.edu >To: mike(a)sentex.net >To: roy(a)its-sby.edu >To: kjc(a)csl.sony.co.jp >To: seichert(a)coopcomp.com >Subject: Skynet Mail Protection scan results >Date: Mon, 02 Feb 2004 12:09:44 +0100 >Importance: high >X-Mailer: ravmd/8.4.2 >X-RAVMilter-Version: 8.4.3(snapshot 20030212) (september.skynet.be) >X-Virus-Scanned: by amavisd-new >X-Spam-Flag: YES >X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on > spamscanner4.sentex.ca >X-Spam-Level: ***** >X-Spam-Status: Yes, hits=5.7 required=5.1 tests=MAILTO_TO_SPAM_ADDR, > MISSING_MIMEOLE,MISSING_OUTLOOK_NAME,TW_JN,X_PRIORITY_HIGH, > X_PRI_MISMATCH_HI autolearn=no version=2.63 >X-Spam-Report: > * 0.5 X_PRIORITY_HIGH Sent with 'X-Priority' set to high > * 0.1 TW_JN BODY: Odd Letter Triples with JN > * 1.1 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely > spammer email > * 1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no > X-MimeOLE > * 2.8 X_PRI_MISMATCH_HI 'X-Priority' does not match > 'X-MSMail-Priority' > * 0.1 MISSING_OUTLOOK_NAME Message looks like Outlook, but isn't > > > >----------------------- >This e-mail is generated by Skynet Mail Protection to warn you that the e-mail >sent by gbs-vossem(a)pi.be to timofeev(a)granch.ru, chris(a)aims.com.au, >dcs(a)newsguy.com, imp(a)harmony.village.org, ted(a)ness.plymouth.edu, >deepak(a)ai.net, bmilekic(a)technokratis.com, randy(a)psg.com, >sthaug(a)nethelp.no, shelton(a)sentry.granch.ru, danny_j_mitzel(a)yahoo.com, >tinguely(a)web.cs.ndsu.nodak.edu, charon(a)hell.gr, jesper(a)skriver.dk, >anandfranklin(a)hotmail.com, nascar24(a)home.nl, c.prevotaux(a)hexanet.fr, >reichert(a)numachi.com, andy(a)tecc.co.uk, provos(a)citi.umich.edu, >rtek(a)dolfijntje.nl, jack_xiao99(a)hotmail.com, >mark.blackman(a)netscalibur.co.uk, gunther(a)aurora.regenstrief.org, >s_bschmi(a)ira.uka.de, vova(a)express.ru, vlad(a)ariel.phys.wesleyan.edu, >lord(a)4jon.com, assar(a)freebsd.org, peter.jeremy(a)alcatel.com.au, >chaegle(a)mediaone.net, brad(a)wcubed.net, ewiz(a)mail.dotcom.fr, >freedom(a)csie.nctu.edu.tw, oberman(a)es.net, wes(a)softweyr.com, >julian(a)elischer.org, iedowse(a)maths.tcd.ie, sroberts84(a)hotmail.com, >maddave(a)suxx.eu.org, ambrisko(a)ambrisko.com, ari(a)suutari.iki.fi, >bonnetf(a)news.esiee.fr, lucky(a)land3.nsu.! > ru, ume(a)freebsd.org, crewking(a)buckeye-express.com, bright(a)sneakerz.org, > tlambert(a)primenet.com, gwford(a)home.com, vlad(a)infonet.com.ua, > freebsd-lists-for-dayan-only-owner(a)egroups.co.uk, kimch(a)etri.re.kr, > chris(a)calldei.com, peter(a)guest-tek.com, sudish(a)corp.earthlink.net, > peter(a)wemm.org, cristjc(a)earthlink.net, yar(a)freebsd.org, > shalunov(a)internet2.edu, mike(a)sentex.net, roy(a)its-sby.edu, > kjc(a)csl.sony.co.jp, seichert(a)coopcomp.com is infected with virus: > Win32/Swen.A@mm. >Deze e-mail is gegenereerd door Skynet Mail Protection om u te waarschuwen dat >de e-mail gestuurd door gbs-vossem(a)pi.be naar timofeev(a)granch.ru, >chris(a)aims.com.au, dcs(a)newsguy.com, imp(a)harmony.village.org, >ted(a)ness.plymouth.edu, deepak(a)ai.net, bmilekic(a)technokratis.com, >randy(a)psg.com, sthaug(a)nethelp.no, shelton(a)sentry.granch.ru, >danny_j_mitzel(a)yahoo.com, tinguely(a)web.cs.ndsu.nodak.edu, charon(a)hell.gr, >jesper(a)skriver.dk, anandfranklin(a)hotmail.com, nascar24(a)home.nl, >c.prevotaux(a)hexanet.fr, reichert(a)numachi.com, andy(a)tecc.co.uk, >provos(a)citi.umich.edu, rtek(a)dolfijntje.nl, jack_xiao99(a)hotmail.com, >mark.blackman(a)netscalibur.co.uk, gunther(a)aurora.regenstrief.org, >s_bschmi(a)ira.uka.de, vova(a)express.ru, vlad(a)ariel.phys.wesleyan.edu, >lord(a)4jon.com, assar(a)freebsd.org, peter.jeremy(a)alcatel.com.au, >chaegle(a)mediaone.net, brad(a)wcubed.net, ewiz(a)mail.dotcom.fr, >freedom(a)csie.nctu.edu.tw, oberman(a)es.net, wes(a)softweyr.com, >julian(a)elischer.org, iedowse(a)maths.tcd.ie, sroberts84(a)hotmail.com, >maddave(a)suxx.eu.org, ambrisko(a)ambrisko.com, ari(a)suutari.iki.fi, >bonnetf(a)news.esiee.fr! > , lucky(a)land3.nsu.ru, ume(a)freebsd.org, crewking(a)buckeye-express.com, > bright(a)sneakerz.org, tlambert(a)primenet.com, gwford(a)home.com, > vlad(a)infonet.com.ua, freebsd-lists-for-dayan-only-owner(a)egroups.co.uk, > kimch(a)etri.re.kr, chris(a)calldei.com, peter(a)guest-tek.com, > sudish(a)corp.earthlink.net, peter(a)wemm.org, cristjc(a)earthlink.net, > yar(a)freebsd.org, shalunov(a)internet2.edu, mike(a)sentex.net, > roy(a)its-sby.edu, kjc(a)csl.sony.co.jp, seichert(a)coopcomp.com geinfecteerd > is met Win32/Swen.A@mm. >Ce mail est généré par Skynet Mail Protection afin de vous prévenir que >l'e-mail envoyé par gbs-vossem(a)pi.be à timofeev(a)granch.ru, >chris(a)aims.com.au, dcs(a)newsguy.com, imp(a)harmony.village.org, >ted(a)ness.plymouth.edu, deepak(a)ai.net, bmilekic(a)technokratis.com, >randy(a)psg.com, sthaug(a)nethelp.no, shelton(a)sentry.granch.ru, >danny_j_mitzel(a)yahoo.com, tinguely(a)web.cs.ndsu.nodak.edu, charon(a)hell.gr, >jesper(a)skriver.dk, anandfranklin(a)hotmail.com, nascar24(a)home.nl, >c.prevotaux(a)hexanet.fr, reichert(a)numachi.com, andy(a)tecc.co.uk, >provos(a)citi.umich.edu, rtek(a)dolfijntje.nl, jack_xiao99(a)hotmail.com, >mark.blackman(a)netscalibur.co.uk, gunther(a)aurora.regenstrief.org, >s_bschmi(a)ira.uka.de, vova(a)express.ru, vlad(a)ariel.phys.wesleyan.edu, >lord(a)4jon.com, assar(a)freebsd.org, peter.jeremy(a)alcatel.com.au, >chaegle(a)mediaone.net, brad(a)wcubed.net, ewiz(a)mail.dotcom.fr, >freedom(a)csie.nctu.edu.tw, oberman(a)es.net, wes(a)softweyr.com, >julian(a)elischer.org, iedowse(a)maths.tcd.ie, sroberts84(a)hotmail.com, >maddave(a)suxx.eu.org,! > ambrisko(a)ambrisko.com, ari(a)suutari.iki.fi, bonnetf(a)news.esiee.fr, > lucky(a)land3.nsu.ru, ume(a)freebsd.org, crewking(a)buckeye-express.com, > bright(a)sneakerz.org, tlambert(a)primenet.com, gwford(a)home.com, > vlad(a)infonet.com.ua, freebsd-lists-for-dayan-only-owner(a)egroups.co.uk, > kimch(a)etri.re.kr, chris(a)calldei.com, peter(a)guest-tek.com, > sudish(a)corp.earthlink.net, peter(a)wemm.org, cristjc(a)earthlink.net, > yar(a)freebsd.org, shalunov(a)internet2.edu, mike(a)sentex.net, > roy(a)its-sby.edu, kjc(a)csl.sony.co.jp, seichert(a)coopcomp.com est infecté > par le virus : Win32/Swen.A@mm. > >Please contact your system administrator for further information. >Gelieve uw systeembeheerder te contacteren voor meer informatie. >Veuillez contacter votre administrateur système pour de plus amples >informations. > >If you are the sender: >Indien u de zender bent: >Si vous êtes l'expéditeur: >------------------- >The scanned e-mail has your address in the <From> header field. Either your >computer is infected or someone's computer having your e-mail address in >the address book has been infected. >De gescande e-mail heeft uw adres in het <From> veld. Dat betekent dat ofwel >jouw computer geinfecteerd is, ofwel dat iemand is geinfecteerd, die jouw >e-mail >adres in zijn/haar adresboek heeft. >Le mail scanné contient votre adresse e-mail dans son en-tête <De>. >Soit votre ordinateur est infecté soit votre adresse e-mail est reprise dans >le carnet d'adresse d'un ordinateur infecté. > >If you are the receiver: >Indien u de bestemmeling bent: >Si vous êtes le destinataire: >--------------------- >Please contact the sender: most likely he/she doesn't know he/she has a >computer virus. >Gelieve de zender te contacteren: hoogst waarschijnlijk weet hij/zij niet >dat hij/zij >geinfecteerd is met een computer virus. >Veuillez contacter l'expéditeur: le plus souvent, il/elle ne sait pas que son >ordinateur est infecté. > >Actions taken for the infected files: >Ondernomen actie voor de geinfecteerde bestanden: >Actions prises pour les fichiers infectés: >------------------------------------- > > >The infected file was saved to quarantine with name: >1075720184-RAVi12B9bAP025868. >The file (part0004:Update.exe) attached to mail (with subject:net critical >upgrade) sent by gbs-vossem(a)pi.be to timofeev(a)granch.ru, >chris(a)aims.com.au, dcs(a)newsguy.com, imp(a)harmony.village.org, >ted(a)ness.plymouth.edu, deepak(a)ai.net, bmilekic(a)technokratis.com, >randy(a)psg.com, sthaug(a)nethelp.no, shelton(a)sentry.granch.ru, >danny_j_mitzel(a)yahoo.com, tinguely(a)web.cs.ndsu.nodak.edu, charon(a)hell.gr, >jesper(a)skriver.dk, anandfranklin(a)hotmail.com, nascar24(a)home.nl, >c.prevotaux(a)hexanet.fr, reichert(a)numachi.com, andy(a)tecc.co.uk, >provos(a)citi.umich.edu, rtek(a)dolfijntje.nl, jack_xiao99(a)hotmail.com, >mark.blackman(a)netscalibur.co.uk, gunther(a)aurora.regenstrief.org, >s_bschmi(a)ira.uka.de, vova(a)express.ru, vlad(a)ariel.phys.wesleyan.edu, >lord(a)4jon.com, assar(a)freebsd.org, peter.jeremy(a)alcatel.com.au, >chaegle(a)mediaone.net, brad(a)wcubed.net, ewiz(a)mail.dotcom.fr, >freedom(a)csie.nctu.edu.tw, oberman(a)es.net, wes(a)softweyr.com, >julian(a)elischer.org, iedowse(a)maths.tcd.ie, sroberts84(a)hotmail.com, >maddave(a)suxx.eu.org! > , ambrisko(a)ambrisko.com, ari(a)suutari.iki.fi, bonnetf(a)news.esiee.fr, > lucky(a)land3.nsu.ru, ume(a)freebsd.org, crewking(a)buckeye-express.com, > bright(a)sneakerz.org, tlambert(a)primenet.com, gwford(a)home.com, > vlad(a)infonet.com.ua, freebsd-lists-for-dayan-only-owner(a)egroups.co.uk, > kimch(a)etri.re.kr, chris(a)calldei.com, peter(a)guest-tek.com, > sudish(a)corp.earthlink.net, peter(a)wemm.org, cristjc(a)earthlink.net, > yar(a)freebsd.org, shalunov(a)internet2.edu, mike(a)sentex.net, > roy(a)its-sby.edu, kjc(a)csl.sony.co.jp, seichert(a)coopcomp.com >is infected with virus: Win32/Swen.A@mm. >The mail was not delivered because it contained dangerous code. > >------------------------ >this is a copy of the e-mail header: > > > >RAV AntiVirus for Linux i386 version: 8.4.2 (snapshot-20030212) > >Scan engine 8.11 for i386. >Last update: Mon, 02 Feb 2004 04:36:04 +01 >Scanning for 89407 malwares (viruses, trojans and worms). -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike(a)sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike

7 7

Re: AOL web troubles.. New AOL speedup seems to be a slowdown
by webmaster＠jessicastover.com 02 Feb '04

02 Feb '04

JC, I would encourage you to get more familiar with the HTTP 1.1 spec with regard to your claim of copyright infringement. I will summarize my interpretation of a part of it here. When someone provides HTTP content, they are agreeing to the protocols governing the transmission of that content, which includes caching and transformation of that content by proxy systems. Fortunately, the spec provides for netizens to send Cache-Control headers that can exclude their content from storage on and transformation by proxies. These headers are outlined in the spec, so I'm not going to detail them here. But as far as I have been able to tell, AOL is in compliance with the Cache-Control specs. I see it like this: Not including Cache-Control headers and claiming copyright infringement is like publishing a novel in English and distributing it in the U.S., but printing the copyright notice in Chinese. Clients accessing your content must be able to understand that you do not wish for it to be transformed; and since proxies speak HTTP, content providers need to include the appropriate HTTP headers so the proxies understand their wishes. Conversely, when a content provider excludes Cache-Control headers, ISPs have free reign to handle the content and deliver to the end user in whatever way they wish, as long as that way falls within the HTTP 1.1 spec. As an aside, I have a special folder on my Apache server for Jessica Stover's website where I keep images that I don't want to be compressed by all of these web accelerators (Earthlink and NetZero have them too, not just AOL). In that folder's .htacccess file, I have included instructions to send the "Cache-Control: No-Transform" header on all files requested via HTTP within that folder; those images are not modified in any way by the various web caching systems out there -- the end user gets the identical image to what is stored on my server. ~ The Gunn webmaster(a)jessicastover.com > AOL is copying and redistributing the image in a new format *without the > permission of the copyright holder* in a way that A) makes AOL money and B) > removes protections that the copyright holder had placed on the image to > help keep third parties from reproducing the image without permission. > > and in doing so: > > IMHO they are infringing on the copyright of those who have placed the > digital watermark in the image. > > jc

5 5

Need abuse contact for Yahoo Hostinng
by Christopher X. Candreva 02 Feb '04

02 Feb '04

Sorry to bother the list, but if anyone from Yahoo is listening, There is an credit card stealing web site hosted by Yahoo. Complaints to abuse(a)yahoo.com, as usual for complaints about their hosting, are returned days later saysing "Sorry, we can't do anything since this spam didn't come through Yahoo.: URL: http://aol.account-cgi1.com/update.htm Please contact me directly for a copy of the scam e-mail and the idiotic Yahoo abuse response. If abuse(a)yahoo-inc.com is not the correct address, then this really should be added to the whois record for your hosting netblocks. ========================================================== Chris Candreva -- chris(a)westnet.com -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/

1 0

Re: Did Wanadoo, French ISP, block access to SCO?
by Miquel van Smoorenburg 02 Feb '04

02 Feb '04

In article <Pine.LNX.4.44.0402020046130.1268-100000(a)server2.tcw.telecomplete.net>, Stephen J. Wilcox <steve(a)telecomplete.co.uk> wrote: > >So thats 1-0 to the worm! > >You could do some real cool things if you were controlling the DNS for a site >under a major sustained DDoS, who doesnt the intended victim like.. just >fire up >an A record and they're gone! ;p http://news.netcraft.com/archives/2004/01/30/wwwscocom_is_a_weapon_of_mass_… Mike.

1 0