Re: Estimate of satellite vs. Land-based traffic

2009-01-06 Thread JF Mezei
Northern communities in Canada's arctic rely exclusively on satellite
for voice/data.

Not a lot of data flowing comparatively, but it is their only option so
it is more of a mission critical thing than a backup.



Re: Christmas spam from RESERVED IANA adressblock ?

2008-12-24 Thread JF Mezei
James Hess wrote:

 RFC1918 addresses should also never be found in mail headers of any
 messages being exchanged over the internet..  


One need to understand the Received: headers and their order.

Private address space is perfectly legitimate. Very common in the early
part of transport and often seen in the last delivery in large
organisations that have multiple distributed SMTP servers.

What is important is for a recipient to know which Received: header he
can trust.

The only IP address you can trust are the one inside your own
organisation, and the IP address that sent the message to your
organisation. All other Received: headers below that to be considered
fake unless proven otherwise.

In the above case, it appears that the message arrived within the
organisation from a public IP address, and then was sent to another host
within the organisation via private address space.

It is also important to note that the topmost header was able to reverse
translate the 10.*.*.* IP which implies that it was internal to the
organisation, using an internal DNS server which makes it more
legitimate since it is within that organisation.




Re: Security Intelligence [Was: Re: Netblock reassigned from Chile to US ISP...]

2008-12-14 Thread JF Mezei
Quick comment on e-commerce.

Consider that in many/most cases, the merchant will want to capture the
customer's address which is sent along with credit card information for
authorization. Once the merchant has received an authorization, he is
pretty much garanteed to get pad by the credit card company.

So the whole geolocation bit is not really necessary because they will
want a real address anyways.


Where geolocation is used is for media companies. If CBS has negotiated
the rights to air a program in the USA, then its web site will be
programmed to only allow USA based IPs to view the on-line version of
that program. In the UK, BBC gets tax revenus from UK citizens, so only
UK IPs are allowed to view the on-line versions of those programs.