[130119] in North American Network Operators' Group
=?UTF-8?Q?Re:=20AS11296=20--=20Hijacked=3F?=
daemon@ATHENA.MIT.EDU (khatfield@socllc.net)
Tue Sep 28 16:19:34 2010
Date: Tue, 28 Sep 2010 16:19:21 -0400 (EDT)
From: khatfield@socllc.net
To: "Heath Jones" <hj1980@gmail.com>
In-Reply-To: <AANLkTinWgi8=uBfbErL=zzM1or1GVpGbhm8KommmHp2K@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Now that's some paranoia ;)=0A=0A-----Original Message-----=0AFrom: "Heath =
Jones" <hj1980@gmail.com>=0ASent: Tuesday, September 28, 2010 4:05pm=0ATo: =
nanog@nanog.org=0ASubject: Re: AS11296 -- Hijacked?=0A=0AHe blocked google =
mail? WTF?=0A=0A=0A---------- Forwarded message ----------=0AFrom: Mail Del=
ivery Subsystem <mailer-daemon@googlemail.com>=0ADate: 28 September 2010 20=
:49=0ASubject: Delivery Status Notification (Failure)=0ATo: hj1980@gmail.co=
m=0A=0A=0ADelivery to the following recipient failed permanently:=0A=0A=C2=
=A0 =C2=A0 rfg@tristatelogic.com=0A=0ATechnical details of permanent failur=
e:=0AGoogle tried to deliver your message, but it was rejected by the=0Arec=
ipient domain. We recommend contacting the other email provider for=0Afurth=
er information about the cause of this error. The error that the=0Aother se=
rver returned was: 550 550 5.7.1=0A<mail-qy0-f176.google.com[209.85.216.176=
]>: Client host rejected:=0ADomain google.com BLACKLISTED - Use=0Ahttp://ww=
w.tristatelogic.com/contact.html (state 14).=0A=0A----- Original message --=
---=0A=0AMIME-Version: 1.0=0AReceived: by 10.224.62.217 with SMTP id y25mr3=
08053qah.193.1285703359508; Tue,=0A=C2=A028 Sep 2010 12:49:19 -0700 (PDT)=
=0AReceived: by 10.229.226.204 with HTTP; Tue, 28 Sep 2010 12:49:12 -0700 (=
PDT)=0AIn-Reply-To: <63619.1285701703@tristatelogic.com>=0AReferences: <636=
19.1285701703@tristatelogic.com>=0ADate: Tue, 28 Sep 2010 20:49:12 +0100=0A=
Message-ID: <AANLkTi=3DqX7cX4F3Y_AZ803WdPmKMTC_hZZPsmdqS1v3r@mail.gmail.com=
>=0ASubject: Re: AS11296 -- Hijacked?=0AFrom: Heath Jones <hj1980@gmail.com=
>=0ATo: "Ronald F. Guilmette" <rfg@tristatelogic.com>=0ACc: nanog@nanog.org=
=0AContent-Type: text/plain; charset=3DISO-8859-1=0AContent-Transfer-Encodi=
ng: quoted-printable=0A=0AOut of curiosity, what led you to this conclusion=
?=0A=0A> Evidence strongly suggests that AS11296 together with all of the I=
Pv4=0A> space it is currently announcing routes for, i.e.:=0A> have all bee=
n hijacked. =C2=A0I will be reporting this formally to ARIN today,=0A> via =
their helpful fraud reporting web form.=0A=0A
