[125206] in North American Network Operators' Group
Re: BGP hijack from 23724 -> 4134 China?
daemon@ATHENA.MIT.EDU (Jeroen van Aart)
Fri Apr 9 21:02:25 2010
Date: Fri, 09 Apr 2010 18:01:43 -0700
From: Jeroen van Aart <jeroen@mompl.net>
To: nanog@nanog.org
In-Reply-To: <4BBFC64E.7050107@zill.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Patrick Giagnocavo wrote:
> This DID actually bite my company about 3 years ago.
>
> A customer went to China (usually in NYC) and could not send email
> through the mail server because they were using POP-before-SMTP instead
> of the mail submission port .
The problem did not lie with blocking IPs. But with offering a flawed
service such as pop before smtp to begin with. I know many ISPs/ESPs
still do, much to my chagrin. The only way to submit email should be
port 587 with TLS encryption, 3 years ago one could be forgiven for
offering deprecated (*) port 465 with SSL, but not anymore (msoft
clients have been fixed).
Regards,
Jeroen
http://www.iana.org/assignments/port-numbers
* urd 465/tcp URL Rendesvous Directory for SSM