To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
Craig,

While your IP may change, your cable modems MAC address (how most cable
networks identify subscribers) does not change. Furthermore, most cable
modems I have seen are the location where the traffic is dropped, and not
some giant network firewall upstream. They could easily unblock you, however
your probablly talking to tier1 tech support, rather than their core network
team or security team. For example, I have port 25 unblocked for my home
connection. It took a while finding the right people to talk to (in my case
it was my ISPs abuse team) but it works great now regardless of my IP.

DBM


-----Original Message-----
From: Craig Holmes [mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 19, 2006 4:23 PM
To: [email protected]
Subject: Re: [botnets] QoS and bot traffic

To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
On Thursday 19 October 2006 12:26, Robert D. Holtz - Lists wrote:
> Not once did we have someone actually notice which ports we were 
> blocking outbound on the CPE.
Would this approach scale effectively for very large ISPs? For example, I
know my ISP (rogers, a large cable provider in Canada) is kind enough to
block several ports for me. These ports include 25, 113, mssql, etc. Calling
up the customer support and requesting they unblock the ports is useless. 
Furthermore, their service allocates IPs dynamically so blocking (or
unblocking) would be difficult to track properly.


Craig
_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and
server information are public and available to law enforcement upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to