[188444] in North American Network Operators' Group
Paging someone at SonicWall/Dell
daemon@ATHENA.MIT.EDU (Dan Mahoney, System Admin)
Wed Mar 23 11:54:27 2016
X-Original-To: nanog@nanog.org
Date: Mon, 21 Mar 2016 18:47:05 -0700 (PDT)
From: "Dan Mahoney, System Admin" <danm@prime.gushi.org>
To: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
All,
If anyone has any contacts at Dell/SonicWall that can assist, their latest
firewalls have a misfeature that have started blocking F-root (ISC, my
Day-job) as a possible botnet responder.
You can reach me, 24/7, at 703-338-2497, or at dmahoney@isc.org.
Needless to say, this is seriously bad. As we ourselves are not
Sonicwall users, our options here are limited.
I've gotten their usual call center nonsense where they told me "I need to
contact my system administrator" and wouldn't transfer me further.
I've submitted a "removal" request via the form at
http://botnet.global.sonicwall.com/change, but that still doesn't help if
there's a firmware out there doing broken hueristics and mass-DDOSing
folks.
If for some reason there actually IS some botnet-related traffic going on
toward the root servers (the root servers get a LOT of garbage, so this
doesn't surprise me), we'd like to know that too.
-Dan Mahoney
--
--------Dan Mahoney--------
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144 AIM: LarpGM
Site: http://www.gushi.org
---------------------------
