Yes, I figured; I was 'scared' to do a whois and I appreciate the confirmations. I am just using the basic built-in Juniper object for domain deny/reject policy because that is all this shop has. It's not the first time, but I was hoping for another answer instead of SOL -- Thanks, Joe On Thu, Mar 25, 2010 at 8:16 PM, Matthew Petach <mpetach@netflight.com> wrote:
On Thu, Mar 25, 2010 at 2:52 PM,<joesox@gmail.com> wrote:
I just ran into this problem about two or so weeks ago hoping it would go away. I am denying 'player.play.it' [currently resolving to 67.148.71.9, 67.148.71.11] on my Juniper firewall.
However I get denied navigating to 'hotmail.com' [policy says it is 67.148.71.11 causing the trouble]
I don't see any player.play.it references in the html or anything (including the live.com sites unless I am missing something). Any hotmail admins fix this or something or maybe I am missing something else.
mpetach@netops2:~> whois -h whois.arin.net 67.148.71.9 Qwest Communications Company, LLC QWEST-INET-19 (NET-67-144-0-0-1) 67.144.0.0 - 67.148.255.255 AKAMAI TECHNOLOGIES INC Q1111-67-148-71-0 (NET-67-148-71-0-1) 67.148.71.0 - 67.148.71.255
# ARIN WHOIS database, last updated 2010-03-25 20:00 # Enter ? for additional hints on searching ARIN's WHOIS database. # # ARIN WHOIS data and services are subject to the Terms of Use # available at https://www.arin.net/whois_tou.html mpetach@netops2:~>
Welcome to the joys of outsourced CDN platforms. You're effectively blocking anything that uses Akamai--probably not what you meant to do. Try re-evaluating your security policy and focus it a bit more tightly on what you're trying to secure against. ^_^;
Matt
-- Thanks, Joe