This line of questioning is utterly bizarre. These operations are well known to use bad data from questionable sources. We blackholed a bunch of them at the MX after hundreds of complaints about a netblock which had been returned to the free pool years ago.

I think it is perfectly reasonable for Andy to trust his own judgement on what his own systems might have been used for.


Will


On 7 Jun 2019, at 15:37, Peter Knapp wrote:

So does the host have no HTTP/HTTPS access, or name server lookups etc?

BT will use all those ports these days.

Peter


-----Original Message-----
From: uknof [mailto:uknof-boun...@lists.uknof.org.uk] On Behalf Of Andy Smith
Sent: 07 June 2019 15:28
To: uknof@lists.uknof.org.uk
Subject: Re: [uknof] Notice of Claimed Infringement from A.B.C.D at 2019-06-05T06:41:07Z - Ref

Hi Peter,

Just iptables on the host, it's just that this particular host has a
restrictive firewall on both input and output and given the ports
and IPs listed in the report it should not have been possible for
that activity to happen.

Of course, if it had been compromised then maybe the firewall got
altered and then put back again afterwards but this all gets a bit
far-fetched for the sake of downloading a movie by BitTorrent.

Like I say, I looked into it and couldn't find any indication that
it had actually happened, and the reporting company was completely
impossible to communicate with.

Cheers,
Andy

On Fri, Jun 07, 2019 at 02:07:50PM +0000, Peter Knapp wrote:
Love to know what firewall you're using that guarantees you can't get any form of BT through it please?

Pete


-----Original Message-----
From: uknof [mailto:uknof-boun...@lists.uknof.org.uk] On Behalf Of Andy Smith
Sent: 07 June 2019 15:04
To: uknof@lists.uknof.org.uk
Subject: Re: [uknof] Notice of Claimed Infringement from A.B.C.D at 2019-06-05T06:41:07Z - Ref

Hello,

On Fri, Jun 07, 2019 at 05:38:10PM +0400, Stephen Wilcox wrote:
On Fri, 7 Jun 2019 at 17:25, Andy Smith <a...@bitfolk.com> wrote:
However, one day they sent one that implicated one of our
infrastructure hosts and I could not see any way in which that could
be torrenting, so I asked for more information. Every form of
contact I made resulted in an auto response suggesting that if I am
confused I should ask my network admin about it.

So you're saying people who work at infrastructure companies - ISPs, DCs etc, they don't do torrents and the like, and they would not do so with
on-premise equipment.

No, I'm saying that unlike customer services in this specific case I
had full access to it and was able to audit it to the best of my
ability and found no such activity. BitTorrent wouldn't even have
been able to get through its firewall.

Cheers,
Andy

--
https://bitfolk.com/ -- No-nonsense VPS hosting

Reply via email to