In my experience, if you fix a problem like this with a one-off waiver to
operate there will be problems down the road as soon as there is a change
of command (at the navy.mil level), they will request all STIG *(Security
Implementation Technical Guide)* be reviewed and implemented, these guides
are often implemented first and consequences are dealt with afterwords.
You will be requesting the same wavier every two to four years.

I agree with Jonathan, but the problem may be bigger than just a domain,
there is probably some kind of blacklisting going on for their netblock as
well.  The department would need to get another IP address as well as a new
domain name.  There will most likely be blacklisting on core router ACLs as
well as SMTP filtering going on at the .mil level.  It's best to keep the
.edu domain separate from anything that .mil would see as harmful (what
ever this years definition of that may be).



On Wed, Oct 30, 2013 at 10:04 PM, Jonathan Bayer
<[email protected]>wrote:

> On 10/30/2013 1:12 PM, Gary Pitman wrote:
>
>> Hi!
>> We have learned over the last couple of weeks that the Navy has
>> apparently blocked network traffic from networks that provide a Tor relay
>> (irony can be pretty ironic sometimes). We have also discovered that a
>> department on our campus hosts a Tor relay. The Internet wants to be free!
>> Julian Assange is using Tor to distribute information and that is why the
>> Navy is blocking the traffic.
>>
>> This is a problem for us because we have some pretty important contracts
>> and potential contracts with the Navy. This has escelated above my head
>> into management and legal but my problem persists. We cannot email
>> navy.mil addresses and they cannot email us.
>>
>> I have thought of registering a domain and using it for an interim email
>> server or smart host but the actual problem needs to be fixed instead of a
>> work around.
>>
>> I am mostly just tossing this out there for information, maybe someone
>> just thinks they are being ignored.
>> ______________________________**_________________
>> Discuss mailing list
>> [email protected]
>> https://lists.lopsa.org/cgi-**bin/mailman/listinfo/discuss<https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss>
>> This list provided by the League of Professional System Administrators
>> http://lopsa.org/
>>
>
> Why not have the department get it's own domain for the relay?
>
>
> JBB
>
> ______________________________**_________________
> Discuss mailing list
> [email protected]
> https://lists.lopsa.org/cgi-**bin/mailman/listinfo/discuss<https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss>
> This list provided by the League of Professional System Administrators
> http://lopsa.org/
>



-- 
Joseph A Kern
[email protected]
_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to