[125206] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BGP hijack from 23724 -> 4134 China?

daemon@ATHENA.MIT.EDU (Jeroen van Aart)
Fri Apr 9 21:02:25 2010

Date: Fri, 09 Apr 2010 18:01:43 -0700
From: Jeroen van Aart <jeroen@mompl.net>
To: nanog@nanog.org
In-Reply-To: <4BBFC64E.7050107@zill.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Patrick Giagnocavo wrote:
> This DID actually bite my company about 3 years ago.
> 
> A customer went to China (usually in NYC) and could not send email
> through the mail server because they were using POP-before-SMTP instead
> of the mail submission port .

The problem did not lie with blocking IPs. But with offering a flawed 
service such as pop before smtp to begin with. I know many ISPs/ESPs 
still do, much to my chagrin. The only way to submit email should be 
port 587 with TLS encryption, 3 years ago one could be forgiven for 
offering deprecated (*) port 465 with SSL, but not anymore (msoft 
clients have been fixed).

Regards,
Jeroen

http://www.iana.org/assignments/port-numbers
* urd             465/tcp    URL Rendesvous Directory for SSM


home help back first fref pref prev next nref lref last post