Proper Protocol for Dealing with Unresponsive Contacts?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, What is the proper way to deal with a company that is unresponsive to any form of contact. IE they have outdated information on their ip assignments, bounce every piece of e-mail that I send? (including postmaster@ which is where the bounce message come from). Here is the situation I am facing. We just registered a new domain (tigerny.net/com) for a project we are working on . It appears that a company, in this case Tigerfund.com has a Microsoft Domain called TIGERNY. Well due to the the helpful setting in Windows that says register this connection in dns (Or something along those lines). We are now seeing 1000's of failed update attempts to our nameservers per day from all of the Tri-State area, mostly cable-modem networks, but also coming from AS5703, as these machines try in vain to update the dns information. As None of the contact information is correct, I have yet to be able to contact a human being, in an attempt to get this corrected. What should my next steps be? My thought is to go to their upstream (AS8112) and try to get contact through them. If it was just a a couple places that this traffic was being sourced from I would just null route them, but since it is all over the place, mostly coming from dynamic ip blocks in RR and Cablevision's cable modem networks, it makes blocking it at our edge rather difficult, if not impossible. Thanks in advance for any suggestions, - -Patrick - -- Patrick Muldoon Network/Software Engineer INOC (http://www.inoc.net) PGPKEY (http://www.inoc.net/~doon) Key fingerprint = 8F70 6306 F0A7 B8DA BA95 76C4 606A 7DC1 370D 752C "Back off Man!, I'm a scientist" Peter Vinkman -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE/L7uIYGp9wTcNdSwRAkP+AJwPsuxH/lu4MSr0mSNzW7edLPC4cwCgsaH0 VOhO3bUkmzd116UYakvJolw= =DiAR -----END PGP SIGNATURE-----
company, in this case Tigerfund.com has a Microsoft Domain called TIGERNY. Well due to the the helpful setting in Windows that says register this
I've had similar problems with a department of the Georgia State Goverment, as well as 2 Asian companies. These have been going on since at least '96 without resolution. I've got specific allow filters in my firewalls in front of the DNS servers that allow AXFR requests only from a small list of DNS servers. The next filter is a block/nolog filter so I don't hear about it anymore. ...david --- david raistrick drais@atlasta.net http://www.expita.com/nomime.html
On Tue, Aug 05, 2003 at 10:13:25AM -0400, Patrick Muldoon wrote:
What is the proper way to deal with a company that is unresponsive to any form of contact. IE they have outdated information on their ip assignments, bounce every piece of e-mail that I send? (including postmaster@ which is where the bounce message come from). [...] What should my next steps be? My thought is to go to their upstream (AS8112) and try to get contact through them.
That's what I usually try. You might want to first make sure you can't find a website for the company (which might have newer contact info), and make sure all the phone numbers are no longer working... looks like you've already done all that, though. If they have invalid contact info, you should also contact ARIN so that they can mark the information as invalid (include a copy of the bounce messages). Submitting them to rfc-ignorant.org might not be a bad idea as well. -- "Since when is skepticism un-American? Dissent's not treason but they talk like it's the same..." (Sleater-Kinney - "Combat Rock")
participants (3)
-
David Raistrick -
Patrick Muldoon -
william+nanog＠hq.dreamhost.com