Re: Open Letter to D-Link about their NTP vandalism

2006-04-14 Thread Edward B. DREGER
SS> Date: Thu, 13 Apr 2006 22:22:11 -0700 SS> From: Steve Sobol Apologies in advance for the OT post... SS> > Well I just saw your .sig... Can't give any credit to your statement. SS> SS> Your choice. I don't see any sense in arguing the point further, as you SS> probably won't change your mi

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Steve Sobol
Alain Hebert wrote: Its a cultural issue... I acknowledge that there are cultural differences, but... y'know, two wrongs, etc. Its not right versus wrong but amelioration versus status-quo... It is *both.* DLink is being obnoxious. That doesn't mean being obnoxious back is the ri

RE: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-13 Thread David Schwartz
> I haven't seen any succinct justification for providing a > 550 message rejection for positively-identified spam versus > silently dropping the message. Lots of how-to instructions > but no whys. > > matthew black > california state university, long beach Because your father may forwar

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Stephen Sprunk
[ In response to Richard A Steenbergen ] Alain Hebert said: > > Well, > > With the way you named your address book (North American Noise and > Off-topic Gripes). > > We now know where to fill your futur comments. > (In the killfile that is) That Cc: came from my message, and RAS

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Peter Corlett
Matt Ghali <[EMAIL PROTECTED]> wrote: > On Wed, 12 Apr 2006, Miquel van Smoorenburg wrote: [...] >> .. after content scanning, user1 wants the mail, user2 doesn't. Now what >> ? > Gosh gomer, is 2821 not available in Books On Tape format? Aww, but reading is *hard*! The simple answer is that RFC

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Chris Kuethe
On 4/13/06, Gregory Hicks <[EMAIL PROTECTED]> wrote: > > From the BBC "Daily news", Technology section: > > * Net clocks suffering data deluge * > Home hardware maker D-Link has been accused of denting the net's > ability to tell the time accurately. > Full story: > http://news.bbc.co.uk/go/em/-

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Gregory Hicks
From the BBC "Daily news", Technology section: * Net clocks suffering data deluge * Home hardware maker D-Link has been accused of denting the net's ability to tell the time accurately. Full story: http://news.bbc.co.uk/go/em/-/2/hi/technology/4906138.stm

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Matt Ghali
On Wed, 12 Apr 2006, Miquel van Smoorenburg wrote: In article <[EMAIL PROTECTED]>, Matt Ghali <[EMAIL PROTECTED]> wrote: [ someone else wrote, but Miquel failed to attribute: ] .or do you think that TCP/IP connection should be held open until the message can be scanned for spam and viruses

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-13 Thread Matthew Black
On Wed, 12 Apr 2006 18:56:44 -0700 (PDT) "Steve Thomas" <[EMAIL PROTECTED]> wrote: How does one properly report delivery failure to a guerrilla spammer? If you accept the message, you can presumably deliver it. In this day and age, anyone accepting mail for a domain without first checking t

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Alain Hebert
Steve Sobol wrote: Alain Hebert wrote: With the way you named your address book (North American Noise and Off-topic Gripes). We now know where to fill your futur comments. (In the killfile that is) You don't seem to want to act very responsibly, based on your comments here,

Re: Open Letter to D-Link about their NTP vandalism

2006-04-13 Thread Michael . Dillon
> What most people participating in this subthread seem to be missing is that > if one did decide to send (or accidentally sent) false time to these D-Link > devices, NOBODY WOULD EVER KNOW OR CARE. Doing so does not solve any > problems, so whatever the legal risk of acting is, no matter ho

Re: well-known NTP? (Re: Open Letter to D-Link about their NTP vandalism)

2006-04-12 Thread Peter Dambier
Sorry for the noise again. Yes, you can edit /etc/hosts No, the box does not care. Neither voipd nor multid care for it Apr 13 05:25:17 voipd[402]: >>> Request: SUBSCRIBE sip:[EMAIL PROTECTED] Apr 13 05:25:17 voipd[402]: dns: _sip._udp.sipgate.de: query Apr 13 05:25:17 voipd[402]: dns: _sip._

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Steve Sobol
Alain Hebert wrote: With the way you named your address book (North American Noise and Off-topic Gripes). We now know where to fill your futur comments. (In the killfile that is) You don't seem to want to act very responsibly, based on your comments here, so it doesn't surprise me

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Alain Hebert
Well, With the way you named your address book (North American Noise and Off-topic Gripes). We now know where to fill your futur comments. (In the killfile that is) Richard A Steenbergen wrote: On Wed, Apr 12, 2006 at 01:32:26PM -0500, Stephen Sprunk wrote: On the plus side,

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Steve Thomas
> How does one properly report delivery failure to a guerrilla spammer? If you accept the message, you can presumably deliver it. In this day and age, anyone accepting mail for a domain without first checking the RCPT TO - even (especially?) on a backup MX - should have their head examined. In th

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Edward B. DREGER
ST> Date: Wed, 12 Apr 2006 10:16:53 -0700 (PDT) ST> From: Steve Thomas ST> RFC 2821? ST> ST> ...the protocol requires that a server accept responsibility ST> for either delivering a message or properly reporting the ST> failure to do so. How does one properly report delivery failure to a

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Richard A Steenbergen
On Wed, Apr 12, 2006 at 01:32:26PM -0500, Stephen Sprunk wrote: > > On the plus side, after seeing D-Link's (lack of) reaction to this, I'll > bet none of us will buy another of their products again. If it was legal to sell whatever you people are smoking that makes you think dlink gives a fly

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Matthew Sullivan
Steve Thomas wrote: Earlier today, I said: Unless you're the final recipient of the message, you have no business deleting it. If you've accept a message, you should either deliver or bounce it, per RFC requirements. I just want to clarify that I was in no way suggesting that anyone

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Alain Hebert
Steve Sobol wrote: On Tue, 11 Apr 2006, Alain Hebert wrote: Because its DIX ressources... They can do whatever they want with it. They owe nothing to DLink customers, and DLink customers should know to buy equipments from a better company that do not trespasses on other

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Matthew Black
On Wed, 12 Apr 2006 14:18:24 -0400 [EMAIL PROTECTED] wrote: On Wed, 12 Apr 2006 10:16:53 PDT, Steve Thomas said: > I haven't seen any succinct justification for providing a > 550 message rejection for positively-identified spam versus > silently dropping the message. Lots of how-to instructio

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Steve Sobol
On Tue, 11 Apr 2006, Alain Hebert wrote: > Because its DIX ressources... They can do whatever they want with it. > > They owe nothing to DLink customers, and DLink customers should > know to buy equipments from a better company that do not trespasses on > other properties. And how

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread goemon
On Wed, 12 Apr 2006, Steve Sobol wrote: On Tue, 11 Apr 2006, Steven M. Bellovin wrote: By the way, since we're talking about D-Link, it's instructive to read the warnings on their firmware update pages. Do NOT upgrade firmware on any D-Link product over a wireless connection. Fa

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Henry Yen
On Wed, Apr 12, 2006 at 12:03:51PM -0400, Joe Maimon wrote: > Matthew Black wrote: > > > there's no bandwidth savings from silently dropping the message > > versus providing a 550 rejection. In the best of all worlds, > > it would be nice to give feedback. No system is perfect and a > > false-pos

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Chris Kuethe
On 4/12/06, Steve Sobol <[EMAIL PROTECTED]> wrote: > On Tue, 11 Apr 2006, Steven M. Bellovin wrote: > > By the way, since we're talking about D-Link, it's instructive to read the > > warnings on their firmware update pages. > > > > Do NOT upgrade firmware on any D-Link product over a wireles

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Steve Sobol
On Tue, 11 Apr 2006, Steven M. Bellovin wrote: > By the way, since we're talking about D-Link, it's instructive to read the > warnings on their firmware update pages. > > Do NOT upgrade firmware on any D-Link product over a wireless > connection. Failure of the device may result.

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Steve Thomas
Earlier today, I said: > Unless you're the final recipient of the message, you have no business > deleting it. If you've accept a message, you should either deliver or > bounce it, per RFC requirements. I just want to clarify that I was in no way suggesting that anyone bounce spam - I was merely

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Stephen Sprunk
Thus spake "Alexei Roudnev" <[EMAIL PROTECTED]> Hmm, if some idiot wrote my NTP IP into his hardware, I just stop to monitor my NTP and make sure that it have few hours of error in time. No one require me to CLAIM that I set up wrong time, BUT no one can require me to maintain correct time just

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Valdis . Kletnieks
On Wed, 12 Apr 2006 10:16:53 PDT, Steve Thomas said: > > > I haven't seen any succinct justification for providing a > > 550 message rejection for positively-identified spam versus > > silently dropping the message. Lots of how-to instructions > > but no whys. > > RFC 2821? > > ...the protocol

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Steve Thomas
> I haven't seen any succinct justification for providing a > 550 message rejection for positively-identified spam versus > silently dropping the message. Lots of how-to instructions > but no whys. RFC 2821? ...the protocol requires that a server accept responsibility for either delivering a

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Joe Maimon
Matthew Black wrote: there's no bandwidth savings from silently dropping the message versus providing a 550 rejection. In the best of all worlds, it would be nice to give feedback. No system is perfect and a false-positive rate of less than one in a million "220" accepted messages seems pr

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Matthew Black
On Wed, 12 Apr 2006 21:12:44 +0530 "Suresh Ramasubramanian" <[EMAIL PROTECTED]> wrote: On 4/12/06, Matthew Black <[EMAIL PROTECTED]> wrote: Where is the bandwidth savings once we've accepted an entire message, scanned it, determined it was spam, then provided a 550 rejection versus silently d

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Suresh Ramasubramanian
On 4/12/06, Matthew Black <[EMAIL PROTECTED]> wrote: > Agreed, but we're willing to live with an error rate of less > than one in a million. This isn't a space shuttle. I don't think > the USPS can claim 99.% delivery accuracy. Nonetheless, to I'm not even saying five nines. Spam filtering

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Matthew Black
On Wed, 12 Apr 2006 20:30:16 +0530 "Suresh Ramasubramanian" <[EMAIL PROTECTED]> wrote: On 4/12/06, Matthew Black <[EMAIL PROTECTED]> wrote: I haven't seen any succinct justification for providing a 550 message rejection for positively-identified spam versus silently dropping the message. Lot

Re: well-known NTP? (Re: Open Letter to D-Link about their NTP vandalism)

2006-04-12 Thread Peter Dambier
Just for curiousity, you can change it. /etc/hosts is a link /etc/hosts -> ../var/tmp/hosts you can edit but you cannot permanently save it. cat /etc/hosts 127.0.0.1 localhost 192.168.178.1 fritz.box 217.10.79.8 0.europe.pool.ntp.org ntp.sipgate.de Now I dont bother pool.ntp.or

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Tony Finch
On Wed, 12 Apr 2006, Matthew Black wrote: > > I haven't seen any succinct justification for providing a > 550 message rejection for positively-identified spam versus > silently dropping the message. If you are wrong about the message being spam, then the sender gets a bounce. Tony. -- f.a.n.fin

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Suresh Ramasubramanian
On 4/12/06, Matthew Black <[EMAIL PROTECTED]> wrote: > > I haven't seen any succinct justification for providing a > 550 message rejection for positively-identified spam versus > silently dropping the message. Lots of how-to instructions > but no whys. > For viruses - fine. But you are not going

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Matthew Black
Several people kindly contacted me off list with laborious explanations of how to implement delayed 550 rejections using sedmail, et al. We gave up sendmail years ago in favor of a competing solution. I haven't seen any succinct justification for providing a 550 message rejection for positively-

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Martin Hannigan
At 10:15 AM -0400 4/12/06, Alain Hebert wrote: FYI: a couple of update at http://people.freebsd.org/~phk/dlink/ I've summited a suggestion for a story to Wired... We'll see. Perhaps they could also talk to someone who actually knows how ntp works as well. -M< -- Martin Hannigan

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Alain Hebert
FYI: a couple of update at http://people.freebsd.org/~phk/dlink/ I've summited a suggestion for a story to Wired... We'll see. -- Alain Hebert[EMAIL PROTECTED] PubNIX Inc. P.O. Box 175 Beaconsfield, Quebec H9W 5T7 tel 514-990-5911

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Robert E . Seastrom
"M. David Leonard" <[EMAIL PROTECTED]> writes: > What is to prevent a network from providing unjittered NTP to its > downstream clients/customers BUT jittered NTP to outsiders? How is this > different from providing up-to-the-millisecond stock exchange data to > paying customers but delaying th

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Tony Finch
On Wed, 12 Apr 2006, M. David Leonard wrote: > > This reminds me of "selective availability" (I think that's the > correct term) in the GPS stream coming from US DOD orbital platforms. > Sure, the data is jittered. Hasn't been for several years. Tony. -- f.a.n.finch <[EMAIL PROTECTED]>

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread M. David Leonard
This reminds me of "selective availability" (I think that's the correct term) in the GPS stream coming from US DOD orbital platforms. Sure, the data is jittered. Who sues because only authorized clients (in that case, US military forces) get unjittered time and position but folks withou

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Joe Maimon
Matthew Sullivan wrote: Suresh Ramasubramanian wrote: On 4/11/06, Matthew Black <[EMAIL PROTECTED]> wrote: Are you suggesting that we configure our e-mail servers to notify people upon automatic deletion of spam? Frequently, spam cannot be properly identified until closure of the SMTP

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Matthew Sullivan
Suresh Ramasubramanian wrote: On 4/11/06, Matthew Black <[EMAIL PROTECTED]> wrote: Are you suggesting that we configure our e-mail servers to notify people upon automatic deletion of spam? Frequently, spam cannot be properly identified until closure of the SMTP conversation and that final 2

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Joe Maimon
Miquel van Smoorenburg wrote: In article <[EMAIL PROTECTED]>, Matt Ghali <[EMAIL PROTECTED]> wrote: .or do you think that TCP/IP connection should be held open until the message can be scanned for spam and viruses just so we can give a 550 MESSAGE REJECTED error instead of silently droppin

Re: well-known NTP? (Re: Open Letter to D-Link about their NTP vandalism)

2006-04-12 Thread Peter Dambier
From my Fritzbox log: Apr 12 06:27:29 multid[360]: dns: 0.europe.pool.ntp.org: query Apr 12 06:27:30 multid[360]: dns: 0.europe.pool.ntp.org: 82.71.9.63 ttl=79 from 192.168.180.1. Apr 12 06:27:30 multid[360]: sending SNTP request to server 0.europe.pool.ntp.org (82.71.9.63) Apr 12 06:27:30 mul

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Matt Ghali <[EMAIL PROTECTED]> wrote: >> .or do you think that TCP/IP connection >> should be held open until the message can be scanned for spam and >> viruses just so we can give a 550 MESSAGE REJECTED error instead of >> silently dropping it? > >absolutely. is t

Re: Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-12 Thread Tony Finch
On Wed, 12 Apr 2006, Suresh Ramasubramanian wrote: > > Exim with the spamassassin patches (sa-exim) does this, for example. SpamAssassin support is built in to Exim since version 4.50. Tony. -- f.a.n.finch <[EMAIL PROTECTED]> http://dotat.at/ BERWICK ON TWEED TO WHITBY: WEST OR SOUTHWEST 5 OR

Re: well-known NTP? (Re: Open Letter to D-Link about their NTP vandalism)

2006-04-12 Thread Tony Finch
On Tue, 11 Apr 2006, Edward B. DREGER wrote: > > AS112-style NTP service, anyone? That would be cooperative and possibly even > useful. pool.ntp.org Tony. -- f.a.n.finch <[EMAIL PROTECTED]> http://dotat.at/ BERWICK ON TWEED TO WHITBY: WEST OR SOUTHWEST 5 OR 6, PERHAPS INCREASING 7 LATER IN N

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread tony sarendal
On 12/04/06, Alexei Roudnev <[EMAIL PROTECTED]> wrote: Hmm, if some idiot wrote my NTP IP into his hardware, I just stop to monitormy NTP and make sure that it have few hours of error in time. No one require me to CLAIM that I set up wrong time, BUT no one can require me to maintaincorrect time ju

Re: well-known NTP? (Re: Open Letter to D-Link about their NTP vandalism)

2006-04-12 Thread Stephane Bortzmeyer
On Tue, Apr 11, 2006 at 10:01:10PM +, Edward B. DREGER <[EMAIL PROTECTED]> wrote a message of 27 lines which said: > AS112-style NTP service, anyone? That would be cooperative and > possibly even useful. It already exists (Security warning: do not use it on strategic machine, there is no

Re: Open Letter to D-Link about their NTP vandalism

2006-04-12 Thread Alexei Roudnev
U.Miami School of Law" <[EMAIL PROTECTED]> To: "Alexei Roudnev" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; "John Dupuy" <[EMAIL PROTECTED]> Sent: Tuesday, April 11, 2006 11:29 AM Subject: Re: Open Letter to D-Link about their NTP vandalism >

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Edward B. DREGER
BD> Date: Tue, 11 Apr 2006 23:47:11 -0400 BD> From: Brian Dickson BD> As to the liability issue, it is easy enough to envision that BD> someone, somewhere, is relying on time results from NTP for a BD> life-or-death application, like a medical device, and is innocently BD> an impacted third party

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Martin Hannigan
At 11:47 PM -0400 4/11/06, Brian Dickson wrote: Two concrete technical suggestions to mitigate the volunteered NTP server's usage issues at the DIX: (1) Have someone else anycast the DIX block, and NAT the incoming NTP requests to another NTP stratum-1 server (eg pool address(es)). Or a much b

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Hank Nussbacher
On Tue, 11 Apr 2006, Alain Hebert wrote: > Yeap ... cooperate... Which DLink is not doing. > > All legal discussion end the same way... a dead end. > > Half are scared by lawyer and the other have enought intestinal > fortitude to put them in there place. > > (At the bottom of t

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Brian Dickson
Two concrete technical suggestions to mitigate the volunteered NTP server's usage issues at the DIX: (1) Have someone else anycast the DIX block, and NAT the incoming NTP requests to another NTP stratum-1 server (eg pool address(es)). Or a much better idea: (2) Renumber into a new /24, which is

Spam filtering bcps [was Re: Open Letter to D-Link about their NTP vandalism]

2006-04-11 Thread Suresh Ramasubramanian
On 4/11/06, Matthew Black <[EMAIL PROTECTED]> wrote: > > Are you suggesting that we configure our e-mail servers to notify > people upon automatic deletion of spam? Frequently, spam cannot be > properly identified until closure of the SMTP conversation and that > final 200 mMESSAGE ACCEPTED...or d

RE: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread David Schwartz
> 2) *Who*says* there is 'malicious intent' involved? I'm going to be > travelling 'off network'(with the 'network' being defined as the one where > I have published that I'm providing time-server services to), and I happen > to have a recurring need for 32-bit units of a specifically > transfo

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Matt Ghali
Hi Matt- On Tue, 11 Apr 2006, Matthew Black wrote: Are you suggesting that we configure our e-mail servers to notify people upon automatic deletion of spam? Absolutely not. I was responding to the suggestion that it's a good idea to silently drop mail which you have accepted with a 2xx SMTP

well-known NTP? (Re: Open Letter to D-Link about their NTP vandalism)

2006-04-11 Thread Edward B. DREGER
Date: Tue, 11 Apr 2006 16:30:11 -0400 From: Valdis.Kletnieks I suppose pointing out that the Internet works because providers *cooperate* and *agree on protocols* would be pointless To a certain [limited] extent, anyway, as countless NANOG-L threads prove time and again. Of course, it

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Alain Hebert
Paul Vixie wrote: I've said in other forums the only solution for this sort of software is to return the wrong time (by several months). The owner might actually notice then and fix the problem. that creates new liability, and isn't realistic in today's litigious world.

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Paul Vixie
> > > > > I've said in other forums the only solution for this sort of > > > > > software is to return the wrong time (by several months). The > > > > > owner might actually notice then and fix the problem. > > > > that creates new liability, and isn't realistic in today's > > > > litigious world

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Alain Hebert
[EMAIL PROTECTED] wrote: On Tue, 11 Apr 2006 15:00:14 CDT, Robert Bonomi said: 1) _Who_says_ it is 'false data'? *Who*knows* what that machines is 'supposed' to provide TO WHOM? I think if you are handing another machine an NTP packet that's intentionally set several months off j

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Valdis . Kletnieks
On Tue, 11 Apr 2006 15:00:14 CDT, Robert Bonomi said: > 1) _Who_says_ it is 'false data'? *Who*knows* what that machines is > 'supposed' > to provide TO WHOM? I think if you are handing another machine an NTP packet that's intentionally set several months off just to get them to shut up, you *k

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Niels Bakker
* [EMAIL PROTECTED] (Robert Bonomi) [Tue 11 Apr 2006, 22:00 CEST]: I'll suggest that there are several presumptions in that 'claim' that are not fully supported by the facts of the matter, as previously described. Please don't suggest anything of the kind. This is not the North American Inte

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Robert Bonomi
> Date: Tue, 11 Apr 2006 14:29:02 -0400 (EDT) > From: "Michael Froomkin - U.Miami School of Law" <[EMAIL PROTECTED]> > Cc: [EMAIL PROTECTED] > Subject: Re: Open Letter to D-Link about their NTP vandalism > > On Tue, 11 Apr 2006, Alexei Roudnev wrote: >

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Michael Froomkin - U.Miami School of Law
I'd really suggest that readers confirm this claim (that intentional sending of false data with a malicious purpose is perfectly acceptable) with a local lawyer before trying it at home or at work.professor> I also bet that the claim of widespread acceptability would fail badly if we weigh

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Valdis . Kletnieks
On Tue, 11 Apr 2006 02:04:39 EDT, Alain Hebert said: > Paul Vixie wrote: > >that creates new liability, and isn't realistic in today's litigious world. > It is DIX resources/equipements... they are not oblige to offer > reliable/secure/valide/etc services to anybody outside their clients. >

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Alain Hebert
Joseph S D Yao wrote: On Tue, Apr 11, 2006 at 02:04:39AM -0400, Alain Hebert wrote: Paul Vixie wrote: [EMAIL PROTECTED] (Simon Lyall) writes: I've said in other forums the only solution for this sort of software is to return the wrong time (by several months). The owner migh

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Joseph S D Yao
On Tue, Apr 11, 2006 at 02:04:39AM -0400, Alain Hebert wrote: > Paul Vixie wrote: > >[EMAIL PROTECTED] (Simon Lyall) writes: > >>I've said in other forums the only solution for this sort of software is > >>to return the wrong time (by several months). The owner might actually > >>notice then and f

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread John Underhill
t;Steven M. Bellovin" <[EMAIL PROTECTED]> To: "John Underhill" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, April 11, 2006 12:24 PM Subject: Re: Open Letter to D-Link about their NTP vandalism

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Eric Pancer
On Tue, 2006-04-11 at 09:28:14 -0700, Alexei Roudnev proclaimed... > It's legal to have broken NTP server in ANY country, and it's legal in most > (by number) countries to send counter-attack (except USA as usual, where > lawyers want to get their money and so do not allow people to self-defence)

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Alexei Roudnev
not in USA. - Original Message - From: "John Dupuy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 11, 2006 9:00 AM Subject: Re: Open Letter to D-Link about their NTP vandalism > > To keep this operational: Operationally the network operator

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Steven M. Bellovin
On Tue, 11 Apr 2006 10:28:32 -0400, "John Underhill" <[EMAIL PROTECTED]> wrote: > > It seems to me, that the only *real* solution is for these manufacturers to > implement a [responsible] strategy of automatic firmware upgrades, as it > pertains to these (simple eu type) devices. > How difficult

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread John Dupuy
To keep this operational: Operationally the network operator should contact a lawyer before doing something like this. Purposely and knowingly sending bad data in order to do harm is a counter-attack. As such it might be vigilantism, which is illegal in most countries. Or it might be self-de

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Joe Maimon
Matthew Black wrote: On Mon, 10 Apr 2006 23:23:06 -0700 (PDT) Matt Ghali <[EMAIL PROTECTED]> wrote: On Tue, 11 Apr 2006, Simon Lyall wrote: Everyone here runs spam filters. Many times a day you tell a remote MTA you've accepted their email but you delete it instead. Explain the differe

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Matthew Black
On Mon, 10 Apr 2006 23:23:06 -0700 (PDT) Matt Ghali <[EMAIL PROTECTED]> wrote: On Tue, 11 Apr 2006, Simon Lyall wrote: Everyone here runs spam filters. Many times a day you tell a remote MTA you've accepted their email but you delete it instead. Explain the difference? Hold on there. What

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread John Underhill
D]>; <[EMAIL PROTECTED]> Sent: Tuesday, April 11, 2006 9:05 AM Subject: Re: Open Letter to D-Link about their NTP vandalism At 08:36 PM 10/04/2006, Simon Lyall wrote: I've said in other forums the only solution for this sort of software is to return the wrong time (by several months

Re: Open Letter to D-Link about their NTP vandalism

2006-04-11 Thread Mike Tancsa
At 08:36 PM 10/04/2006, Simon Lyall wrote: I've said in other forums the only solution for this sort of software is to return the wrong time (by several months). The owner might actually notice then and fix the problem. Of our customers who have such routers, I would say 90% would not know t

Re: Open Letter to D-Link about their NTP vandalism

2006-04-10 Thread Matt Ghali
On Tue, 11 Apr 2006, Simon Lyall wrote: Everyone here runs spam filters. Many times a day you tell a remote MTA you've accepted their email but you delete it instead. Explain the difference? Hold on there. What you are describing is evil and bad, and I certainly hope "everyone" does not do t

Re: Open Letter to D-Link about their NTP vandalism

2006-04-10 Thread Alain Hebert
Paul Vixie wrote: [EMAIL PROTECTED] (Simon Lyall) writes: I've said in other forums the only solution for this sort of software is to return the wrong time (by several months). The owner might actually notice then and fix the problem. that creates new liability, and isn't reali

Re: Open Letter to D-Link about their NTP vandalism

2006-04-10 Thread Simon Lyall
On Tue, 11 Apr 2006, Paul Vixie wrote: > [EMAIL PROTECTED] (Simon Lyall) writes: > > > I've said in other forums the only solution for this sort of software is > > to return the wrong time (by several months). The owner might actually > > notice then and fix the problem. > > that creates new liabi

Re: Open Letter to D-Link about their NTP vandalism

2006-04-10 Thread Paul Vixie
[EMAIL PROTECTED] (Simon Lyall) writes: > I've said in other forums the only solution for this sort of software is > to return the wrong time (by several months). The owner might actually > notice then and fix the problem. that creates new liability, and isn't realistic in today's litigious worl

Re: Open Letter to D-Link about their NTP vandalism

2006-04-10 Thread Simon Lyall
On Mon, 10 Apr 2006 [EMAIL PROTECTED] wrote: > One particular piece of crapware of the tucows archive variety would retry > once per second if it hadn't heard a response - but a ICMP Port Unreachable > would trigger an *immediate* query, so it would basically re-query at whatever > the RTT for the

Re: Open Letter to D-Link about their NTP vandalism

2006-04-09 Thread Valdis . Kletnieks
On Sat, 08 Apr 2006 11:17:20 CDT, Nicholas Suan said: > It would be nice if it were that simple. However there are an annoyingly > large amount of poorly-written clients whose polling ratios do not > decrease after they get no response from the server. There have even > been some clients whose poll

Re: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Nicholas Suan
On Sat, Apr 08, 2006 at 10:51:27AM -0500, Church, Chuck wrote: > Since the intended (and announced) use of this server is just for DIX > networks, blocking NTP from any other networks should be trivial. That > IP address will still be hit by D-Link devices looking for a suitable > server, but wi

RE: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Church, Chuck
"Service Area: Networks BGP-announced on the DIX" Since the intended (and announced) use of this server is just for DIX networks, blocking NTP from any other networks should be trivial. That IP address will still be hit by D-Link devices looking for a suitable server, but with no response, the

RE: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread up
On Fri, 7 Apr 2006, Todd Vierling wrote: > > On Fri, 7 Apr 2006, David Hubbard wrote: > > > How about serve back bogus NTP data to non-BIX customer > > prefixes? Maybe if people's computers start setting > > themselves to the year 2004 D-Link will do something. :-) > > Perhaps return back a time

Re: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Jared Mauch
On Sat, Apr 08, 2006 at 03:15:24AM -0400, [EMAIL PROTECTED] wrote: > On Fri, 07 Apr 2006 20:16:03 EDT, Jared Mauch said: > > > My suggestion is rename from gps -> gps1 and drop the gps > > dns name. That combined with some bind/whatever views that > > scope the dns responses are effective si

Re: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Suresh Ramasubramanian
On 4/8/06, Robert E. Seastrom <[EMAIL PROTECTED]> wrote: > The addresses that are configured into shipping Apple products for NTP are: > >time.apple.com >time.asia.apple.com >time.euro.apple.com ubuntu linux has ntp.ubuntulinux.org for this Oh, and windows xp is set up with an option

Re: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Robert E . Seastrom
Matt Ghali <[EMAIL PROTECTED]> writes: > Companies behaving irresponsibly and releasing (selling!) code that > abuses a shared public resource should not be the norm. The addresses that are configured into shipping Apple products for NTP are: time.apple.com time.asia.apple.com time.eu

Re: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Simon Lockhart
On Sat Apr 08, 2006 at 03:15:24AM -0400, [EMAIL PROTECTED] wrote: > There's still an ARP > every 2-3 seconds for it caused by people who hard-coded the IP address. I've been configuring up a few ciscos recently. In the config, I enter "ntp server pool.ntp.org", at which point IOS resolves pool.nt

Re: Open Letter to D-Link about their NTP vandalism

2006-04-08 Thread Valdis . Kletnieks
On Fri, 07 Apr 2006 20:16:03 EDT, Jared Mauch said: > My suggestion is rename from gps -> gps1 and drop the gps > dns name. That combined with some bind/whatever views that > scope the dns responses are effective since it's a DNS name. That will fix the problem. In 2012 or so. I have a h

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Richard A Steenbergen
Ok let me answer two at once here: On Fri, Apr 07, 2006 at 06:57:50PM -0400, Steven M. Bellovin wrote: > > Did you read the posting? His ISP is charging him. He's also put in > a fair amount of time trying to get this resolved. As for transit -- > NTP works much better with short RTTs, which

RE: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Mark Borchers
Jeff Shultz wrote: > By no means am I encouraging legally actionable activity, > however, and as noted, (b) just might be. LOL! Did you read down to the end?... /quote/ I can't afford to sue D-Link. It seems that they have managed to arrange their corporate affairs so that there is no way I c

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Todd Vierling
On Fri, 7 Apr 2006, Matt Ghali wrote: > > I think the lesson here is that any service you make available to the public > > (NTP, DNS, IRC, SMTP, whatever) is going to be used in ways that do not > > match with your desires. If you're not willing to ACL/police the service, > > you're going to have

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Matt Ghali
On Fri, 7 Apr 2006, Kevin Day wrote: I think the lesson here is that any service you make available to the public (NTP, DNS, IRC, SMTP, whatever) is going to be used in ways that do not match with your desires. If you're not willing to ACL/police the service, you're going to have to accept th

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Per Gregers Bilse
On Apr 7, 6:49pm [EMAIL PROTECTED] wrote: > *sigh* Yes yes everyone loves a good "large stupid company screws the > little guy by sticking their small/free service into a commercial product" > story, but unfortunately none of these solutions are very pragmatic. If I > hosted an NTP server and

RE: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread goemon
On Fri, 7 Apr 2006, David Hubbard wrote: From: Rubens Kuhl Jr. It still would require him to answer the DNS requests. Only way to addres that is everybody outside DIX declare gps.dix.de as www.dlink.com in their resolvers. How about serve back bogus NTP data to non-BIX customer prefixes? Mayb

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Jared Mauch
On Fri, Apr 07, 2006 at 06:49:18PM -0400, Richard A Steenbergen wrote: > Seriously now, there are a million viable solutions here, ranging from > mild inconvenience to attempting to screw dlink for being dumbasses, all > of which are free. Point the A record else where and have people who care

  1   2   >