[122203] in North American Network Operators' Group
Re: black listing of web traffic
daemon@ATHENA.MIT.EDU (Chris Campbell)
Tue Feb 9 14:49:49 2010
From: Chris Campbell <Chris.Campbell@nebulassolutions.com>
To: Andrey Gordon <andrey.gordon@gmail.com>
Date: Tue, 9 Feb 2010 19:49:56 +0000
In-Reply-To: <90ccfc91002091135s64daaab1n141c92bff5095d64@mail.gmail.com>
Cc: Nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I know that cisco either are or have integrated the IronPort =20
reputation service into their IPS devices, maybe a check on www.senderbase.=
org=20
could help.
Chris Campbell
---------------------
On 9 Feb 2010, at 19:36, "Andrey Gordon" <andrey.gordon@gmail.com> =20
wrote:
> Hi list
>
> I have a problem that I can't seem to find a solution to yet. My =20
> student
> network is being NATted out and anyone who's on that network had =20
> troubles
> accessing random websites.
> For example, going to www.apple.com or www.facebook.com would work =20
> great,
> but store.apple.com would either not load or take forever to open up.
>
> I've had that problem last week and thought I tracked it down to the =20
> NAT ip
> being black listed with one of the span black lists. Even though =20
> that IP is
> not used for mail out, that somehow seemed to affect it. Changing it =20
> to a
> different one seemed to solve the problem and I got that original =20
> address of
> the list in the mean time. Changed it back and everything was well, =20
> until
> today.
> Same symptoms, but now I don't see us listed anywhere.
> The best description of the symptoms seems to be that that IP is rate
> limited or something.
>
> Anyone seen that? Are there any blacklists for web access?
>
> PS. I checked everything under my control and i don't see a bottle =20
> neck
> anywhere or anything like and IPS working up or something....
>
>
> -----
> Andrey Gordon [andrey.gordon@gmail.com]
