[174087] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Ebay/Paypal blocking HTTP access based on SORBS DUHL / Spamhaus

daemon@ATHENA.MIT.EDU (Steve Atkins)
Thu Aug 21 09:47:11 2014

X-Original-To: nanog@nanog.org
From: Steve Atkins <steve@blighty.com>
In-Reply-To: <53F5F2E7.9090803@lanparty.ee>
Date: Thu, 21 Aug 2014 06:46:54 -0700
To: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org


On Aug 21, 2014, at 6:23 AM, Tarko Tikan <tarko@lanparty.ee> wrote:

> hey,
>=20
> For a while now, we have been getting complains from our broadband =
customers about not being able to reach ebay.com/paypal.com
>=20
> We have nailed it down to some small prefixes and they are all listed =
in SORBS DUHL / Spamhaus PBL and have been listed for ages. These are =
indeed dynamic IP pools and should not send any email (not that SMTP has =
anything to do with HTTP).
>=20
> For some reason, it looks like ebay/paypal is now blocking HTTP access =
based on these blacklists.

That seems really unlikely. If they were blocking access purely due to =
it being from dynamically assigned ranges, someone else would have =
noticed.

High fraud rate or other misbehaviour from those ranges seems more =
likely.

Can you share the data that makes you think it's the former?

> Does anyone have working contact in their NOC or with security people? =
All emails to public contacts have not been answered to.

Cheers,
  Steve=

home help back first fref pref prev next nref lref last post