Suppressed Routes AS30174 17090 ?

2004-05-19 Thread P.Schroebel
Hello Folk, I was wondering if in-fact any of our routes are being suppressed either via our ASN 30174 or any of our ip space 66.164.0.0/16 or 66.79.96.0/20.Givenand Granted that we have hadrotten history of sorts. However, we really have cleaned up our networks and rid ourselves of all

Re: backscatter hosts

2004-05-19 Thread John Capo
Quoting Steven Champeon ([EMAIL PROTECTED]): It's not really my business why a hotmail.com MX accepted mail it couldn't deliver. I could care less /why/. It's up to hotmail to fix their systems - I don't care how they perform that background check on quota. Exactly. It's my business

Goddard SFC

2004-05-19 Thread Jason McCormick
If anyone at Goddard Space Flight Center (gsfc.nava.gov) is on the list, can you please contact me off-list about an e-mail blocking issue? -- Jason McCormick [EMAIL PROTECTED] GPG Fingerprint: 66C5 2B15 3E34 2B5E 5321 6147 303A DCE6 0A74 A19C

Re: Secondary MX user list filter for Sendmail

2004-05-19 Thread Crist Clark
Todd Vierling wrote: A colleague asked me offlist about how to make a Sendmail secondary MX properly return 550 for invalid recipient addresses. [snip] For those with an LDAP directory containing mailbox information, I'd recommend using sendmail's built-in LDAP capabilities. I've found it a good

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: There's one rule that will wipe out ~90% of spam, but nobody seems to have written it yet. if URL IP addr is in China then score=100 I beg to differ Eric A. Hall. According to statistics gathered by the Spamhaus Project

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Steven Champeon
on Wed, May 19, 2004 at 03:12:29PM -0700, James Couzens wrote: On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: There's one rule that will wipe out ~90% of spam, but nobody seems to have written it yet. if URL IP addr is in China then score=100 ^^^ I

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Dan Hollis
On Wed, 19 May 2004, James Couzens wrote: On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: There's one rule that will wipe out ~90% of spam, but nobody seems to have written it yet. if URL IP addr is in China then score=100 I beg to differ Eric A. Hall. No Eric is quite correct. Read

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 5:12 PM, James Couzens ([EMAIL PROTECTED]) wrote: On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: There's one rule that will wipe out ~90% of spam, but nobody seems to have written it yet. if URL IP addr is in China then score=100 ^^^ not connection address, not

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Richard Cox
On 19 May 2004 15:12:29 -0700 James Couzens [EMAIL PROTECTED] wrote: | if URL IP addr is in China then score=100 | I beg to differ Eric A. Hall. ... | | So contrary to what you said, perhaps I should just Null Route all | email originating from the USA? ;) While this is verging off our remit

Slides for NANOG31 IPsec tutorial

2004-05-19 Thread Duane Wessels
If you plan to attend Sunday's hands-on tutorial for using the IPsec server at NANOG, you may want to have a look at the slides in advance. You can find them at: http://www.packet-pushers.net/NANOG/ipsec/ Unix users, in particular, may need to prepare their systems by building a new kernel

List of dynamic IP's

2004-05-19 Thread Bob Martin
Does anyone know of a list of dynamic IP's by ISP? I'm looking for something akin to this list from AOL http://postmaster.info.aol.com/info/servers.html TIA Bob Martin

Re: List of dynamic IP's

2004-05-19 Thread Adam 'Starblazer' Romberg
Does anyone know of a list of dynamic IP's by ISP? By ISP, no, but this may be of interest, http://www.mail-abuse.org/dul/ Thanks, Adam Adam 'Starblazer' Romberg Appleton: 920-738-9032 System Administrator Valley Fair:

Re: List of dynamic IP's

2004-05-19 Thread Adam 'Starblazer' Romberg
Now if I read that page, it's no longer available for public access, if you purchase it, it may be of some use for you.. other than that, I do not know. *-1 for jumping an idea without researching* Thanks, Adam Adam 'Starblazer' Romberg

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Wed, 2004-05-19 at 15:28, Eric A. Hall wrote: not connection address, not domain 'owner', but URL-Hostname-IP_ADDR What's most interesting about the half-dozen accusations of xenophobia I've received (off-list and on) is that they've almost all come from foreigners. I promise not to read

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 6:19 PM, James Couzens wrote: On Wed, 2004-05-19 at 15:28, Eric A. Hall wrote: Going through the spam that I've got access to (and it is a substantial amount allbeit not in the millions of spam per day) I can't seem to associate the spam with chinese urls, and certainly not to

FW: RE: List of dynamic IP's

2004-05-19 Thread Nicole
Not Ip's but domain names etc I block. You can perhaps generate some from this? http://www.unixgirl.com/blockeddomains.html Nicole On 19-May-04 the GW commando coersion squad reported Bob Martin said : Does anyone know of a list of dynamic IP's by ISP? I'm looking for something

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Stephen J. Wilcox
On Wed, 19 May 2004, Richard Cox wrote: While this is verging off our remit here, I would clarify the point originally made, which is that if a URL - that is, a URL cited in the body of a message - points to an IP physically located in China, then that signals a high probability of the

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Dan Hollis
On Thu, 20 May 2004, Stephen J. Wilcox wrote: On Wed, 19 May 2004, Richard Cox wrote: While this is verging off our remit here, I would clarify the point originally made, which is that if a URL - that is, a URL cited in the body of a message - points to an IP physically located in China,

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Randy Bush
perhaps this all belongs on alt.jingo.weenies? can we focus on network operations not network exclusionism? this is worse than spam.

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Wed, 2004-05-19 at 16:24, Eric A. Hall wrote: extract hostname from url, dig on hostname, whois on addr, and nine times out of ten the host is in a CN netblock. that's from the spam that gets into my mailbox. Yes I understand that is what you meant. I just did this on 5 spam in my mail

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 6:38 PM, Stephen J. Wilcox wrote: Altho this is probably not true if you're one of the billion or so people who live in or around China or are of Chinese origin.. just check for charset=US-ASCII first. come to think of it, ASCII would probably give half the necessary weight

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Couzens wrote: | On Wed, 2004-05-19 at 16:24, Eric A. Hall wrote: | |extract hostname from url, dig on hostname, whois on addr, and nine times |out of ten the host is in a CN netblock. that's from the spam that gets |into my mailbox. | | | Yes I

RE: Barracuda Networks Spam Firewall

2004-05-19 Thread Brian Battle
Title: RE: Barracuda Networks Spam Firewall Eric, There's one rule that will wipe out ~90% of spam, but nobody seems to have written it yet. if URL IP addr is in China then score=100 support for a generic lookup list of cidr blocks would get another 9% I agree that geographically

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 7:06 PM, James Couzens wrote: I just did this on 5 spam in my mail box, I got: [domains ommitted--tripped my filters] my last 10 survivors are at http://www.ehsco.com/misc/last-10-spams.eml the relevant data for them in order of occurrance is below. eight are CN, one is KR, one

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Wed, 2004-05-19 at 17:47, Randy Bush wrote: gosh! maybe someone should set up a mailing list to discuss spam, anti-spam, ...? you mean they have? well, then maybe a bunch of us network operators (as opposed to spam weenies) should go over there and talk about sdh, router configs,

RE: Cisco's Statement about IPR Claimed in draft-ietf-tcpm-tcpsecure

2004-05-19 Thread Terry Baranski
The same document that fully ignores that port number randomness will severely limit the risk of susceptibility to such an attack? How many zombies would it take to search the port number space exhaustively? Irrelevant. The limiting factor here is how many packets can make it to

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread joe
Folks, If I may offer a humble opinion here before this gets out of hand. I see many (me included) trying to side step the issue that SMTP is a broken and insecure protocol for that of electronic messages(ing). I see folks blacklisting, RBLing, and other methods in an attempt to fix the issue,

Yahoo to MSN problems

2004-05-19 Thread Hank Nussbacher
http://help.yahoo.com/help/us/groups/messages/messages-19.html Attention Hotmail and MSN users Hotmail and MSN mail users are currently experiencing delays of up to 1 day in receiving Groups messages. If delays exceed this, we may begin to not deliver older messages. We are sorry that you are