Re: Working with Spamhaus

2015-07-28 Thread Matt Palmer
On Tue, Jul 28, 2015 at 11:41:08PM -0600, Bryan Tong wrote: > Yes that is part of it. > > There are other blocks they listed as well. Well, http://www.spamhaus.org/sbl/query/SBL263089 has a fair amount of shady stuff going on, and http://www.spamhaus.org/sbl/listings/esited.com gives a pretty dec

Re: Working with Spamhaus

2015-07-28 Thread Bryan Tong
Yes Larry, I have followed those instructions without a response. So I was curious what to do when no response is given. I will wait longer and see. Sorry if anything I have done has upset you. Thanks On Wed, Jul 29, 2015 at 12:03 AM, Larry Sheldon wrote: > On 7/29/2015 00:58, Larry Sheldon w

Re: Working with Spamhaus

2015-07-28 Thread Larry Sheldon
On 7/29/2015 00:58, Larry Sheldon wrote: On 7/29/2015 00:37, Matt Palmer wrote: I suspect that http://www.spamhaus.org/query/ip/199.87.233.245 may be part of it (although it indicates a /21 blocked, not a /17). And the removal instructions for that range (SBL) seems crystal clear to me, but l

Re: Working with Spamhaus

2015-07-28 Thread Larry Sheldon
On 7/29/2015 00:37, Matt Palmer wrote: I suspect that http://www.spamhaus.org/query/ip/199.87.233.245 may be part of it (although it indicates a /21 blocked, not a /17). And the removal instructions for that range (SBL) seems crystal clear to me, but long experience teaches that what is cryst

Re: Working with Spamhaus

2015-07-28 Thread Bryan Tong
Yes that is part of it. There are other blocks they listed as well. On Tue, Jul 28, 2015 at 11:37 PM, Matt Palmer wrote: > On Tue, Jul 28, 2015 at 11:13:02PM -0500, Larry Sheldon wrote: > > On 7/28/2015 22:57, Bryan Tong wrote: > > > > >Yes I have followed all of the procedures. I will continue

Re: Working with Spamhaus

2015-07-28 Thread Matt Palmer
On Tue, Jul 28, 2015 at 11:13:02PM -0500, Larry Sheldon wrote: > On 7/28/2015 22:57, Bryan Tong wrote: > > >Yes I have followed all of the procedures. I will continue to wait to see > >if there is any change. > > Would you please send me the address range in question--I would like to see > what t

Re: Working with Spamhaus

2015-07-28 Thread Pavel Odintsov
Hello! Completely agree with Larry. I'm enough big hosting provider and we have multiple spam issues every day. But we fix they ASAP before any folks from SpamHaus become angry :) So we still have 1-2 abuses from SpamHaus every few weeks. But we resolve they in few hours and we haven't any issues

Re: Working with Spamhaus

2015-07-28 Thread Larry Sheldon
On 7/29/2015 00:24, goe...@anime.net wrote: On Tue, 28 Jul 2015, Larry Sheldon wrote: On 7/28/2015 22:06, Bryan Tong wrote: If anyone has any advice on how to deal with these people. Please let me know here or off list. Based on years of experience, the very best way is "don't". You have to

Re: Working with Spamhaus

2015-07-28 Thread goemon
On Tue, 28 Jul 2015, Larry Sheldon wrote: On 7/28/2015 22:06, Bryan Tong wrote: If anyone has any advice on how to deal with these people. Please let me know here or off list. Based on years of experience, the very best way is "don't". You have to work pretty hard to get a /17 listed. Don'

Re: Working with Spamhaus

2015-07-28 Thread Larry Sheldon
On 7/28/2015 22:57, Bryan Tong wrote: Yes I have followed all of the procedures. I will continue to wait to see if there is any change. Would you please send me the address range in question--I would like to see what they told you to do. -- sed quis custodiet ipsos custodes? (Juvenal)

Re: Working with Spamhaus

2015-07-28 Thread Bryan Tong
Hello, Yes I have followed all of the procedures. I will continue to wait to see if there is any change. Thanks On Tue, Jul 28, 2015 at 9:53 PM, Larry Sheldon wrote: > On 7/28/2015 22:39, Bryan Tong wrote: > >> Well, >> >> I wouldnt have such a disheartened attitude if they would have been >>

Re: Working with Spamhaus

2015-07-28 Thread Larry Sheldon
On 7/28/2015 22:39, Bryan Tong wrote: Well, I wouldnt have such a disheartened attitude if they would have been specific or given time to comply. I find listing an entire /17 without cause or a report to back it up an unjust action. Have you tried the widely known services they provide? http

Re: Working with Spamhaus

2015-07-28 Thread Larry Sheldon
On 7/28/2015 22:06, Bryan Tong wrote: If anyone has any advice on how to deal with these people. Please let me know here or off list. Based on years of experience, the very best way is "don't". Don't profit from spam, and as a result don't deal with Spamhaus at all. -- sed quis custodiet

Re: Working with Spamhaus

2015-07-28 Thread Bryan Tong
Well, I wouldnt have such a disheartened attitude if they would have been specific or given time to comply. I find listing an entire /17 without cause or a report to back it up an unjust action. I have contacted them through multiple mediums and have found no response. So if someone has had bet

RE: Working with Spamhaus

2015-07-28 Thread Michael J McCafferty
I know this is going to sound worse than the spirit in which I offer it but... Step one might be to adjust the attitude from "Deal with these people" to something along the lines of "how might we best resolve the issue". No matter who you deal with, you will get much further with a good hum

Working with Spamhaus

2015-07-28 Thread Bryan Tong
Hello All, SpamHaus has done us the favor of blacklisting all of our prefixes due to the issues with handful of IPs from customers we have removed from our network. They are now being unresponsive on helping us get these listings removed and we have a lot of legitimate customers who are no longer

Re: DDOS Simulation

2015-07-28 Thread Damian Menscher via NANOG
Two more options: - http://www.redwolfsecurity.com/#!ddos_testing/cqd6 (not vouching for them, just raising awareness of the options) - Spin up a bunch of VMs at various cloud providers and launch your own attacks against yourself. Note that you should only do this with the permission of the c

Re: DDOS Simulation

2015-07-28 Thread Brett Watson
> On Jul 28, 2015, at 9:05 PM, jim deleskie wrote: > > If anyone offers to "test" your DDoS devices across a network that you do > not 100% own, you are risking legal issues. > > If they offer to test it across your own network, make sure you have in > writing from you upper management that the

Re: Windows 10 Release

2015-07-28 Thread Larry Sheldon
On 7/28/2015 15:45, Nick Olsen wrote: Wonder if they'll stage the release as apple appeared to have learned after IOS7 hammered a bunch of networks. Everything I have gotten for my personal machines suggests that it may be months before "my" copies are released. -- sed quis custodiet ip

Re: DDOS Simulation

2015-07-28 Thread jim deleskie
If anyone offers to "test" your DDoS devices across a network that you do not 100% own, you are risking legal issues. If they offer to test it across your own network, make sure you have in writing from you upper management that they understand the risk and approve it. If you choose to do it anyw

Level3 routing issues

2015-07-28 Thread Matt Hoppes
Is anyone seeing packet loss or routing issues on the Level3 network on the east coast right now?

Re: Windows 10 Release

2015-07-28 Thread Jason Bothe
We have heard they will be available via 8075. Jason Bothe, Manager of Networking Rice University o +1 713 348 5500 m +1 713 703 3552 ja...@rice.edu > On Jul 28, 2015, at 19:09, Erik Sundberg wrote: > > Does anyone know if Microso

Re: Windows 10 Release

2015-07-28 Thread Kyle McLerren
http://www.computerworld.com/article/2943954/microsoft-windows/microsoft-confirms-waves-roll-out-of-windows-10.html On 7/28/15, 1:45 PM, "NANOG on behalf of Nick Olsen" wrote: >Anyone anxious to see what kind of traffic comes from Windows 10 releasing >tomorrow? > > Being a 3-4GB download

Re: Windows 10 Release

2015-07-28 Thread Justin Mckillican
For upgraders I believe only 5 million 'Insiders' that tested Windows 10 will get it tomorrow. The rest of the free upgraders (those from Win7 and Win8) will get it over the next two weeks at different times with the priority going to those that 'reserved' it in Windows Update tool. -justin

Re: DDOS Simulation

2015-07-28 Thread Ryan Pugatch
Hi Dovid, I recommend checking out NimbusDDOS. http://www.nimbusddos.com/ I know that they have done exactly this for several notable customers, and also provide insights into impacts (they don't just blindly run the attacks for you, they provide intelligence behind what's happening to help you m

Re: Windows 10 Release

2015-07-28 Thread Mike Hammett
According to the article I read... it's pretty much everywhere. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: "Erik Sundberg" To: "Curtis Maurand" , "Niels Bakker" , nanog@nanog.org Sent: Tuesday, July 28, 2015 7:09:52 PM

RE: Windows 10 Release

2015-07-28 Thread Erik Sundberg
Does anyone know if Microsoft will be hosting the downloads from there ASN 8075 or from an CDN Provider like Akamai? -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Curtis Maurand Sent: Tuesday, July 28, 2015 6:43 PM To: Niels Bakker ; nanog@nanog.org Subjec

Re: Windows 10 Release

2015-07-28 Thread Curtis Maurand
Microsoft tells me 3.2 GB for win 10 pro 64 bit. On July 28, 2015 6:04:04 PM EDT, Niels Bakker wrote: >* n...@flhsi.com (Nick Olsen) [Tue 28 Jul 2015, 22:46 CEST]: >>Being a 3-4GB download. Each device is moving more data than any Apple > >>update ever did. > >I'm not so sure of that. The 10.9 i

Re: Windows 10 Release

2015-07-28 Thread Sadiq Saif
On 7/28/2015 16:45, Nick Olsen wrote: > Anyone anxious to see what kind of traffic comes from Windows 10 releasing > tomorrow? > > Being a 3-4GB download. Each device is moving more data than any Apple > update ever did. > > Wonder if they'll stage the release as apple appeared to have le

Re: DDOS Simulation

2015-07-28 Thread Roland Dobbins
On 29 Jul 2015, at 5:19, alvin nanog wrote: as previously noted by others, legit corp will ask you for lots of legal paperwork for their "get out of jail card" for DDoS'ing your servers and all the other ISP's routers along the way that had to transport those gigabyte/terabyte of useless ddo

Re: DDOS Simulation

2015-07-28 Thread alvin nanog
hi dovid On 07/28/15 at 02:31pm, Dovid Bender wrote: > We are looking for a company that can launch a DDOS attack against the > solutions we are testing. I don't want a proof of concept from the company > that will be offering DDOS protection since they can simulate an easy > attack and then miti

Re: Windows 10 Release

2015-07-28 Thread Alex Brooks
Hi, On Tue, Jul 28, 2015 at 9:45 PM, Nick Olsen wrote: > > Anyone anxious to see what kind of traffic comes from Windows 10 releasing > tomorrow? > > Being a 3-4GB download. Each device is moving more data than any Apple > update ever did. > > Wonder if they'll stage the release as apple appear

Re: Windows 10 Release

2015-07-28 Thread Niels Bakker
* n...@flhsi.com (Nick Olsen) [Tue 28 Jul 2015, 22:46 CEST]: Being a 3-4GB download. Each device is moving more data than any Apple update ever did. I'm not so sure of that. The 10.9 install image clocked in at 4.9 GB, and the Mac App Store for 10.10 Yosemite says "Size: 5.67 GB"; http://www

RE: Windows 10 Release

2015-07-28 Thread Keith Medcalf
> Good to know. > > I was one of those insiders, And it's running on my laptop currently. It > got the 10240 build a bit ago. Which removed the "insider preview" water > marks, And appears to be the full release version.. So it would appear the > "insiders" already have it. Or the ability to get

Re: Windows 10 Release

2015-07-28 Thread Nick Olsen
Good to know. I was one of those insiders, And it's running on my laptop currently. It got the 10240 build a bit ago. Which removed the "insider preview" water marks, And appears to be the full release version.. So it would appear the "insiders" already have it. Or the ability to get it.

Windows 10 Release

2015-07-28 Thread Nick Olsen
Anyone anxious to see what kind of traffic comes from Windows 10 releasing tomorrow? Being a 3-4GB download. Each device is moving more data than any Apple update ever did. Wonder if they'll stage the release as apple appeared to have learned after IOS7 hammered a bunch of networks.

Re: DDOS Simulation

2015-07-28 Thread Paul S.
Seeing as the 'traditional' ways to launch big DDoS attacks are illegal, and you're after a 'legit' company to offer this... Yeah, I don't think you'll get too far. You'll either have to roll your own testsuite on a lan environment, or ... On 29/7/2015 3:31 AM, Dovid Bender wrote: We are look

Re: DDOS Simulation

2015-07-28 Thread Dovid Bender
We are looking for a company that can launch a DDOS attack against the solutions we are testing. I don't want a proof of concept from the company that will be offering DDOS protection since they can simulate an easy attack and then mitigate. I want whom ever we go with to be able to handle what eve

Re: Yandex DNS with Sophos antivirus blocking TrendMicro services

2015-07-28 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Thanks for that -- luckily, this issue has been fixed. Cheers, - - ferg On 7/27/2015 10:37 AM, Oleg A. Arkhangelsky wrote: > > > 25.07.2015, 19:21, "Murat Kaipov" : >> Hello Guys. >> >> For 2 day I experience an issue with using my trendmicro

Re: DDOS Simulation

2015-07-28 Thread Pavel Odintsov
Yep, it's definitely possible. I have done this with netmap/PF_RING/DPDK and SnabbSwitch. On Tue, Jul 28, 2015 at 1:06 AM, Ammar Zuberi wrote: > I've seen people push close to 10Gbps line rate with 1 byte packets on an > Intel card with PF_RING. > >> On 28 Jul 2015, at 1:40 am, lobna gouda wrot

Re: DDOS Simulation

2015-07-28 Thread Pavel Odintsov
Hello! My machines have 16GB of memory but traffic generator uses about ~1GB of memory for 10GE link. On Tue, Jul 28, 2015 at 12:36 AM, alvin nanog wrote: > > hi pavel > > On 07/28/15 at 12:02am, Pavel Odintsov wrote: >> It's poor man's traffic generator :) > > that's the best kind :-) > as long