Re: Fun new policy at AOL

2003-08-28 Thread Vadim Antonov
On Thu, 28 Aug 2003, Matthew Crocker wrote: If your ISP violates your privacy or has a privacy policy you don't like, find another one. How do I know that? As a hobby, I'm running a community site for an often misunderstood sexual/lifestyle minority. Most of patrons would be very unhappy

Re: ICMP traffic increasing on most backbones Re: GLBX ICMP rate limiting

2003-08-28 Thread Rachael Treu
Inline. On Thu, Aug 28, 2003 at 12:01:16PM -0400, Sean Donelan said something to the effect of: On Thu, 28 Aug 2003, Steve Carter wrote: The rate-limiters have become more interesting recently, meaning they've actually started dropping packets (quite a lot in some cases) because of the

London Power outage

2003-08-28 Thread David Diaz
Can anyone in London provide details on the outage... are any colos on generator? dave

RE: London Power outage

2003-08-28 Thread Todd Mitchell - lists
| David Diaz | Sent: Thursday, August 28, 2003 2:35 PM | | Can anyone in London provide details on the outage... are any colos | on generator? | dave | Reuters is reporting the power as being restored. http://www.reuters.com/newsArticle.jhtml?type=worldNewsstoryID=3352971 Todd --

Re: Fun new policy at AOL

2003-08-28 Thread Roland Perry
In article [EMAIL PROTECTED], Matthew Crocker [EMAIL PROTECTED] writes If your ISP ... does a bad thing ... find another one. Great in theory, but the market is imperfect. Even if money (and the loss you'd incur from terminating your current ISP early) isn't the main issue. Many countries, even

Re: Fw: GLBX ICMP rate limiting (was RE: Tier-1 without their ownbackbone?)

2003-08-28 Thread Christopher L. Morrow
On Thu, 28 Aug 2003 [EMAIL PROTECTED] wrote: http://tinyurl.com/li0s Neither is really an 'order' so much as a 'suggestion'.. either way, its kind of inappropriate to make this suggestion without knowing how each operator can or could apply a fix... that is my opinion atleast. The

Re: ICMP traffic increasing on most backbones Re: GLBX ICMP ratelimiting

2003-08-28 Thread Dan Hollis
On Thu, 28 Aug 2003, Rachael Treu wrote: Facing facts, people are _not_ patching their stuff, in spite of pervasive pleas and warnings from vendors and media geeks. There need to be more serious consequences for not patching. Like, having their ports turned down until they decide that

RE: Fun new policy at AOL

2003-08-28 Thread Tony Hain
Matthew Crocker wrote: Shouldn't customers that purchase IP services from an ISP use the ISPs mail server as a smart host for outbound mail? Look carefully at that question and find the logic error. ... In case you missed it, the customer purchased 'IP' service, not 'ISP mail

Re: Sobig.f surprise attack today

2003-08-28 Thread Dan Hollis
On Thu, 28 Aug 2003, Owen DeLong wrote: Alternatively, perhaps we could, instead, publish an INFECTED SYSTEMS blacklist based on such connections to a honeypot. Any system which made the correct request could then have it's address published via BGP or DNS for ISPs and the like to do as

Dealing with infected users (Re: ICMP traffic increasing on most backbones Re: GLBX ICMP rate limiting

2003-08-28 Thread Mike Tancsa
We have been doing that. During quiet times our Customer Service Reps (CSR) are calling infected users telling them a) Their computer has been compromised. In its current state it can potentially be taken over by others or other users can look at the contents of their private files etc. b)

Re: Sobig.f surprise attack today

2003-08-28 Thread Mike Tancsa
At 12:54 PM 28/08/2003 -0700, Dan Hollis wrote: Alternatively, perhaps we could, instead, publish an INFECTED SYSTEMS blacklist based on such connections to a honeypot. Any system which made the correct request could then have it's address published via BGP or DNS for ISPs and the like to do

Re: Fun new policy at AOL

2003-08-28 Thread Paul Vixie
That's why we must encourage all ISPSs to be good guys, because we don't want Government Regulators setting standards in these areas, do we? if recent activity in the VoIP market is any indication, then we here won't have much input as to when and how the ISP market gets regulated. -- Paul

Re: Re[2]: relays.osirusoft.com

2003-08-28 Thread George William Herbert
Paul wrote: this part, on the other hand... he's put *.*.*.* in, he's asking people not to use it anymore. ...mystifies me. anyone who has read rfc1034 or rfc1035, even if they did not also read rfc2181 or rfc2136 or rfc2308, knows that in a

Re: Sobig.f surprise attack today

2003-08-28 Thread Petri Helenius
Mike Tancsa wrote: I dont think this would work too well. The users who are infected often think something is wrong because their connection and computer are not working quite right. So they disconnect / reconnect / reboot so they burn through quite a few dynamic IP addresses along the way.

RE: Fun new policy at AOL

2003-08-28 Thread JC Dill
At 12:53 PM 8/28/2003, Tony Hain wrote: Matthew Crocker wrote: Shouldn't customers that purchase IP services from an ISP use the ISPs mail server as a smart host for outbound mail? Look carefully at that question and find the logic error. ... In case you missed it, the customer purchased

Re: Sobig.f surprise attack today

2003-08-28 Thread Mike Tancsa
At 11:14 PM 28/08/2003 +0300, Petri Helenius wrote: Mike Tancsa wrote: I dont think this would work too well. The users who are infected often think something is wrong because their connection and computer are not working quite right. So they disconnect / reconnect / reboot so they burn

Re: Sobig.f surprise attack today

2003-08-28 Thread Damian Gerow
Thus spake Petri Helenius ([EMAIL PROTECTED]) [28/08/03 16:23]: I dont think this would work too well. The users who are infected often think something is wrong because their connection and computer are not working quite right. So they disconnect / reconnect / reboot so they burn through

Re: Sobig.f surprise attack today

2003-08-28 Thread Patrick Muldoon
On Thursday 28 August 2003 04:24 pm, Mike Tancsa wrote: At 11:14 PM 28/08/2003 +0300, Petri Helenius wrote: Mike Tancsa wrote: I dont think this would work too well. The users who are infected often think something is wrong because their connection and computer are not working quite right.

Re: Fw: GLBX ICMP rate limiting (was RE: Tier-1 without their own backbone?)

2003-08-28 Thread Michael Hallgren
Selon Christopher L. Morrow [EMAIL PROTECTED]: On Thu, 28 Aug 2003, [EMAIL PROTECTED] wrote: On Thu, 28 Aug 2003, Christopher L. Morrow wrote: Rate-limiting ICMP is 'ok' if you, as the provider, think its worthwhile and you, as the provider, want to deal with the headache

Re: Sobig.f surprise attack today

2003-08-28 Thread Petri Helenius
Damian Gerow wrote: Or potentially an artifact of wanting more IP space from ARIN, as opposed to assigning a static IP to every user we have, even the ones that are only connected for about an hour a month. But hey, that's just a minor detail. Sorry for momentarily phasing to our local

Re: Fun new policy at AOL

2003-08-28 Thread Susan Zeigler
Mike Tancsa wrote: At 02:34 AM 8/28/2003 -0500, Susan Zeigler wrote: WTF. This IP is NOT dynamic. The client has had it for about two years. What is the IP address they are rejecting ? Unless AOL is downloading the entire routing pools from all ISPs on a daily basis, how do they

Re: Sobig.f surprise attack today

2003-08-28 Thread Mike Tancsa
At 11:47 PM 28/08/2003 +0300, Petri Helenius wrote: connections has passed the dialup ones a few years ago. Dialup users also cannot generate any significant DDoS traffic even if combined by a factor of 1. a)http://www.acm.org/sigcomm/sigcomm2003/papers.html#p75-kuzmanovic b)Trinity

Re: Dealing with infected users (Re: ICMP traffic increasing on most backbones Re: GLBX ICMP rate limiting

2003-08-28 Thread Dan Hollis
On Thu, 28 Aug 2003, Mike Tancsa wrote: The majority comply and are understanding. and the rest? -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]

RE: Fun new policy at AOL

2003-08-28 Thread R. Benjamin Kessler
Does the IP address of your client's SMTP server have a reverse DNS entry (PTR record) assigned to it? It seems to be a new best practice to not accept e-mail from an IP address that doesn't have a PTR record assigned. Furthermore, if those PTR records indicate anything like dial dns cable then

Re: London Power outage

2003-08-28 Thread Stephen J. Wilcox
I saw it on CNN but it sounds like it wasnt as bad as they wanted to make out.. frmo what I was told none of the major colos which are all in the East lost utility and I dont know about stuff in the South which is where the power was out.. seems theres not much of interest there from a netork

Re: Fun new policy at AOL

2003-08-28 Thread Stephen J. Wilcox
On Thu, 28 Aug 2003, Matthew Crocker wrote: Shouldn't customers that purchase IP services from an ISP use the ISPs mail server as a smart host for outbound mail? Shouldn't. There are privacy implications of having mail to be recorded (even temporarily) at someone's disk drive.

Re: Fun new policy at AOL

2003-08-28 Thread Mike Tancsa
At 03:48 PM 28/08/2003 -0500, Susan Zeigler wrote: Unless AOL is downloading the entire routing pools from all ISPs on a daily basis, how do they know which IPs are dynamic and which are static;) What would BGP tables tell you about internal routing and DNS ? It's 216.161.123.79 If they

Re: Dealing with infected users (Re: ICMP traffic increasing on most backbones Re: GLBX ICMP rate limiting

2003-08-28 Thread Mike Tancsa
At 01:57 PM 28/08/2003 -0700, Dan Hollis wrote: On Thu, 28 Aug 2003, Mike Tancsa wrote: The majority comply and are understanding. and the rest? There will always be troublesome customers, but the VAST majority have been compliant. If they dont want to comply to something as reasonable as this,

Re: Dealing with infected users (Re: ICMP traffic increasing on most backbones Re: GLBX ICMP rate limiting

2003-08-28 Thread Vadim Antonov
It should be pointed put that the ISPs have their share of blame for the quick-spreading worms, beause they neglected very simple precautions -- such as giving cutomers pre-configured routers or DSL/cable modems with firewalls disabled by default (instead of the standard end-user, let only

Re: Fun new policy at AOL

2003-08-28 Thread Susan Zeigler
Bob Bradlee wrote: Road-Runner pulled the same stunt with a chain of radio stations I have as clients. We went ON-AIR with a NEWS story, and recomended that everyone effected should call Roadrunner or AOL. AOL contacted me, verified the problem, and had my IP's whitelisted in a matter of

Re: Fun new policy at AOL

2003-08-28 Thread Dr. Jeffrey Race
On Thu, 28 Aug 2003 12:07:30 -0400, Matthew Crocker wrote: It can be built without choke points. ISPs could form trust relationships with each other and bypass the central mail relay. AOL for example could require ISPs to meet certain criteria before they are allowed direct connections.

<    1   2