It's not unassigned. Here's what I've got from whois.arin.net:


RYC, Incorporated (NETBLK-UU-208-225-214-64-D1)
   10700 Windridge Drive
   Austin, TX 78759
   US

   Netname: UU-208-225-214-64-D1
   Netblock: 208.225.214.64 - 208.225.214.95

   Coordinator:
      Cunningham, Fred  (FC280-ARIN)  [EMAIL PROTECTED]
      512-258-5470

   Record last updated on 04-Aug-1998.
   Database last updated on 25-Oct-2000 07:00:04 EDT.


_________________________________________________________
Fernando Cardoso              Phone:   +351 21 7982186
Network Administrator         Fax:     +351 21 7982185
National Library              E-mail:  [EMAIL PROTECTED]
Portugal                      PGP ID:  28551CB8 

> 
> 
> We have been having problems with SMTP through our firewall 
> lately.  Going
> through the logs, I have found a specific IP address 
> associated with most
> SMTP errors in the log.  When I try to do a traceroute or a 
> whois on this
> IP address I get an unknown host or an unknown network.  It 
> seems to be an
> unassigned IP address, one that doesn't belong to an assigned 
> block.  I
> have specifically blocked this IP address and have turned on 
> block invalid
> originators (we are already blocking relays), but I don't 
> know if these
> things will stop whoever from access this port on our 
> firewall and causing
> us problems.  Time will tell.  My questions are, how can we 
> track down the
> user of this IP address?  Is it even possible?  How many 
> unassigned blocks
> exist?  Any suggestions on protecting ourselves from these IP 
> addresses?
> Our firewall is IBM SecureWay Firewall 4.11 and the IP 
> address in question
> is 208.225.214.81 (just in case I was doing something wrong 
> in looking up
> the address).
> 
> Thanks,
> 
> Lee Herbst
> 
> 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to