Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Florian Weimer
* Hank Nussbacher: > Please show me which virus scanner scans html pages for the words like > V I A G R A, or Free M O R T G A G E, as it is going outbound. I assumed your Internet cafe example was the concrete scenario you were trying to address. There are quite a few scaners which contain sig

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Hank Nussbacher
On Fri, 11 Aug 2006, Florian Weimer wrote: I assumed your Internet cafe example was the concrete scenario you were trying to address. There are quite a few scaners which contain Not only. Just used as an example so everyone can be on the same page. There are hugely different two scenarios

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Simon Waters
On Friday 11 Aug 2006 05:24, Hank Nussbacher wrote: > On Thu, 10 Aug 2006, Florian Weimer wrote: > > You should look after the automated tools (probably using a virus > > scanner or something like this) and trigger a covert alert once they > > are detected. If the spam sent out is of the right ki

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Peter Corlett
On 10 Aug 2006, at 22:07, Barry Shein wrote: [...] The vector for these has been almost purely Microsoft Windows. I wonder. From the point of view of a MX host (as opposed to a customer-facing smarthost), would TCP fingerprinting to identify the OS and apply a weighting to the spam score b

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Peter Corlett
On 11 Aug 2006, at 05:24, Hank Nussbacher wrote: [...] Please show me which virus scanner scans html pages for the words like V I A G R A, or Free M O R T G A G E, as it is going outbound. It's the one you're going to have to write, or coerce somebody to write, if you want it that much. I

BGP Update Report

2006-08-11 Thread cidr-report
BGP Update Report Interval: 29-Jul-06 -to- 10-Aug-06 (12 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS614721658 1.6% 79.9 -- Telefonica del Peru S.A.A. 2 - AS17974 19202 1.5%

The Cidr Report

2006-08-11 Thread cidr-report
This report has been generated at Fri Aug 11 21:47:29 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table Hist

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Valdis . Kletnieks
On Fri, 11 Aug 2006 09:38:46 BST, Peter Corlett said: > > On 10 Aug 2006, at 22:07, Barry Shein wrote: > [...] > > The vector for these has been almost purely Microsoft Windows. > > I wonder. From the point of view of a MX host (as opposed to a > customer-facing smarthost), would TCP fingerprin

Re: SORBS Contact

2006-08-11 Thread Laurence F. Sheldon, Jr.
Steve Sobol wrote: Allan Poindexter wrote: Matthew> so would you consider as it is my network, that I should Matthew> not be allowed to impose these 'draconian' methods and Matthew> perhaps I shouldn't be allowed to censor traffic to and Matthew> from my networks? If you want to run a ne

fingerprinting and spam ID (was: Re: ISP wants to stop outgoing web based spam)

2006-08-11 Thread Steven Champeon
on Fri, Aug 11, 2006 at 09:38:46AM +0100, Peter Corlett wrote: > > On 10 Aug 2006, at 22:07, Barry Shein wrote: > [...] > >The vector for these has been almost purely Microsoft Windows. > > I wonder. From the point of view of a MX host (as opposed to a > customer-facing smarthost), would TCP f

Re: SORBS Contact

2006-08-11 Thread Nachman Yaakov Ziskind
> >You're certainly welcome to encourage others not to use blacklists. Just > >understand that you have no right to complain when they decide to continue > >using those blacklists. > > > >Having said that, do understand that I don't think DNSBL's are a panacea, > >nor are their operators perfect.

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Ken Simpson
> On 10 Aug 2006, at 22:07, Barry Shein wrote: > [...] > >The vector for these has been almost purely Microsoft Windows. > > I wonder. From the point of view of a MX host (as opposed to a > customer-facing smarthost), would TCP fingerprinting to identify the > OS and apply a weighting to the

New Laptop Polices

2006-08-11 Thread Cullen, Michael
Greetings all,   Given the new threats and the change in policy with the airlines and traveling in and around the UK, has anyone changed their laptop and portable computing device policy?  We are being questioned about the safety of executives traveling with their laptops.     Thank Yo

Re: SORBS Contact

2006-08-11 Thread Ken Simpson
> Weighing in with an opinion, as bad as blacklists *may be*, at least > they let the sender know something's up. Not in an artful way, to be > sure, but they give some notice. The sender can do _something_, > including dropping his association with the recipient b/c it's not worth > his time and

Re: SORBS Contact

2006-08-11 Thread Nachman Yaakov Ziskind
Ken Simpson wrote (on Fri, Aug 11, 2006 at 09:09:33AM -0700): > > > Weighing in with an opinion, as bad as blacklists *may be*, at least > > they let the sender know something's up. Not in an artful way, to be > > sure, but they give some notice. The sender can do _something_, > > including dropp

Re: New Laptop Polices

2006-08-11 Thread Mike Lyon
Are laptops being questioned now in the UK when going through security? I would assume that they are probably wiping every laptop and doing the explosive check that they do... -Mike On 8/11/06, Cullen, Michael <[EMAIL PROTECTED]> wrote: Greetings all, Given the new threats and the chan

Re: New Laptop Polices

2006-08-11 Thread Peter Cohen
> Given the new threats and the change in policy with the airlines and > traveling in and around the UK, has anyone changed their laptop and portable > computing device policy? We are being questioned about the safety of > executives traveling with their laptops. > > Michael Cullen > > Globa

Re: New Laptop Polices

2006-08-11 Thread Randy Bush
you have sent a message to me which seems to contain a legal warning on who can read it, or how it may be distributed, or whether it may be archived, etc. i do not accept such email. my mail user agent detected a legal notice when i was opening your mail, and automatically deleted it. so do not

Re: New Laptop Polices

2006-08-11 Thread Randy Bush
> randy, why not invite the new/etc... guy who probably never posted > before to come to a nanog instead of being so mean to the poor guy? >> you have sent a message to me which seems to contain a legal >> warning on who can read it, or how it may be distributed, or >> ... apologies to all. i ha

Weekly Routing Table Report

2006-08-11 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to [EMAIL PROTECTED] For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <[EMAIL PROTECTED

Re: New Laptop Polices

2006-08-11 Thread Neil J. McRae
I think the issue is more to do with theft by dodgy baggage handlers (or randy if he sees a disclaimer notice on the laptop case in which case he'd throw it in the trash and ask the airport concierge to make an announceent about it over the airport PA system ;)). If you have data that is so sen

Re: fingerprinting and spam ID (was: Re: ISP wants to stop outgoing web based spam)

2006-08-11 Thread Ken Simpson
> The problem is that I already see enough legit mail hit the > quarantine due to being HTML/multipart, suspected of being sent > "direct-to-MX" due to Exchange's bizarre habit of not providing an > audit trail via Received headers, etc. Of course by the time you can inspect the body of a message

Re: ISP wants to stop outgoing web based spam

2006-08-11 Thread Ken Simpson
Alexander Harrowell [11/08/06 17:09 +0100]: > Holding the geek snobbery for a moment, I don't think I've ever worked > anywhere where the e-mail wasn't MSExchange...so that would kill 100% of > "e-mail containing actual financially meaningful information". Yes it would if host type was the only f

Fedex Contact?

2006-08-11 Thread Dennis Dayman
Does anyone have a Fedex.com contact that can help troubleshoot an email issues?

Re: New Laptop Polices

2006-08-11 Thread Chris Riling
Of course take precautions with leaving files on the network, and using "secure" remote access to those files, but I don't necessarily trust most users to not keep some sort of sensitive data on local disk, so we started rolling out PGP whole disk encryption... Chris On 8/11/06, Neil J. McRae <

Re: New Laptop Polices

2006-08-11 Thread Jim Popovitch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Cohen wrote: > 2. with regard to safety of laptops, if you mean that exec's are > targets of robberies, than this further lends value i suspect of > keeping everything on the network and having passwords to reach the > network from the laptop,

Re: SORBS Contact

2006-08-11 Thread Andrew D Kirch
Michael Nicks wrote: Actually I think this thread progressed from someone getting dirty blocks, to complaining about liberal-listing-RBLs (yes SORBS is one), to RBLs defending themselves and their obviously broken practices. We should not have to jump through hoops to satisfy your requiremen

Re: New Laptop Polices

2006-08-11 Thread David Lesher
I think "baggage time" is a hell of an opportunity to plant that keysnatcher you always wanted on the target's machine. Note "you" could be the Feebee's or the Beltway bandit bidding against the target, or dissident BoD member or It's also a great time to plant some file that POOF the auth

Re: New Laptop Polices

2006-08-11 Thread Christopher L. Morrow
On Fri, 11 Aug 2006, David Lesher wrote: > It's also a great time to plant some file that POOF the authorities > will decrypt & show it's kiddie porn. {Or just hide same in your > browser cache.} Do YOU know what every frigging file on your > machine is? and here I was thinking: "Quick! buy sto

Re: New Laptop Polices

2006-08-11 Thread Joseph S D Yao
Do modern laptops have disk drives that are that hard to remove? -- Joe Yao --- This message is not an official statement of OSIS Center policies.

Re: New Laptop Polices

2006-08-11 Thread Christopher L. Morrow
On Fri, 11 Aug 2006, Joseph S D Yao wrote: > Do modern laptops have disk drives that are that hard to remove? one screw and 'pop' out comes all dell laptop harddrives... or boot from cd, usb->copy all data, slide back into case and move on to next. you have 2 hours between baggage arrival and l

Re: New Laptop Polices

2006-08-11 Thread Laurence F. Sheldon, Jr.
Joseph S D Yao wrote: Do modern laptops have disk drives that are that hard to remove? Let us say "No, they are not that hard to remove." Now what? (Recall that this thread started with a situation where it was said that carry-on was limited to passport, medicine in small quantities, and

Re: New Laptop Polices

2006-08-11 Thread Rusty Dekema
No, it is easy enough to remove laptop hard drives. -Rusty On 8/11/06, Joseph S D Yao <[EMAIL PROTECTED]> wrote: Do modern laptops have disk drives that are that hard to remove? -- Joe Yao --- This message is not an offic

Re: New Laptop Polices

2006-08-11 Thread Laurence F. Sheldon, Jr.
Christopher L. Morrow wrote: On Fri, 11 Aug 2006, Joseph S D Yao wrote: Do modern laptops have disk drives that are that hard to remove? one screw and 'pop' out comes all dell laptop harddrives... or boot from cd, usb->copy all data, slide back into case and move on to next. you have 2 hou

Re: New Laptop Polices

2006-08-11 Thread Laurence F. Sheldon, Jr.
Laurence F. Sheldon, Jr. (that is me) wrote: Christopher L. Morrow wrote: On Fri, 11 Aug 2006, Joseph S D Yao wrote: Do modern laptops have disk drives that are that hard to remove? one screw and 'pop' out comes all dell laptop harddrives... or boot from cd, usb->copy all data, slide back

Re: New Laptop Polices

2006-08-11 Thread Christopher L. Morrow
On Fri, 11 Aug 2006, Laurence F. Sheldon, Jr. wrote: > > Christopher L. Morrow wrote: > > > On Fri, 11 Aug 2006, Joseph S D Yao wrote: > > > >>Do modern laptops have disk drives that are that hard to remove? > > > > one screw and 'pop' out comes all dell laptop harddrives... or boot from > > cd,

Re: New Laptop Polices

2006-08-11 Thread Joseph S D Yao
On Sat, Aug 12, 2006 at 02:28:33AM +, Christopher L. Morrow wrote: > On Fri, 11 Aug 2006, Joseph S D Yao wrote: > > > Do modern laptops have disk drives that are that hard to remove? > > one screw and 'pop' out comes all dell laptop harddrives... or boot from > cd, usb->copy all data, slide

Re: New Laptop Polices

2006-08-11 Thread Laurence F. Sheldon, Jr.
Joseph S D Yao wrote: On Sat, Aug 12, 2006 at 02:28:33AM +, Christopher L. Morrow wrote: On Fri, 11 Aug 2006, Joseph S D Yao wrote: Do modern laptops have disk drives that are that hard to remove? one screw and 'pop' out comes all dell laptop harddrives... or boot from cd, usb->copy

Re: New Laptop Polices

2006-08-11 Thread Joseph S D Yao
On Fri, Aug 11, 2006 at 09:31:52PM -0500, Laurence F. Sheldon, Jr. wrote: > > Joseph S D Yao wrote: > > >Do modern laptops have disk drives that are that hard to remove? > > Let us say "No, they are not that hard to remove." > > Now what? (Recall that this thread started with a situation wher

Re: New Laptop Polices

2006-08-11 Thread Jim Popovitch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Here's a thought most airlines offer expedited freight service (i.e. Delta Dash). One could seal their lappy up in a box, mark it accordingly, and ship to for hold at destination airport. Chances are it will arrive before they do. - -Jim P. --

Re: New Laptop Polices

2006-08-11 Thread joelja
Joseph S D Yao wrote: > On Fri, Aug 11, 2006 at 09:31:52PM -0500, Laurence F. Sheldon, Jr. wrote: >> Joseph S D Yao wrote: >> >>> Do modern laptops have disk drives that are that hard to remove? >> Let us say "No, they are not that hard to remove." >> >> Now what? (Recall that this thread starte

mpls gear for outside plant?

2006-08-11 Thread Christian Kuhtz
Anyone know of vendors who make low density MPLS edge (IPVPN, VPLS, VPWS) gear, which can survive in outside plant? There doesn't seem to be much out there that can, most stuff that is data center type tops out at 40C. I'm looking for 45C or higher operating temp. Please respond direct