[30659] in North American Network Operators' Group
Re: Now the idiots at ORBS are probing random dial-ups
daemon@ATHENA.MIT.EDU (Chris Adams)
Tue Aug 22 09:53:17 2000
Date: Tue, 22 Aug 2000 08:51:09 -0500
From: Chris Adams <cmadams@hiwaay.net>
To: nanog@merit.edu
Message-ID: <20000822085109.C19198@HiWAAY.net>
Mail-Followup-To: nanog@merit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <39A20D6C.11E6216B@NorthShoreTechnologies.net>; from sjsobol@NorthShoreTechnologies.net on Tue, Aug 22, 2000 at 01:19:40AM -0400
Errors-To: owner-nanog-outgoing@merit.edu
Once upon a time, Steve Sobol <sjsobol@NorthShoreTechnologies.net> said:
> Chris Adams wrote:
> > As for ORBS: I have had several customers with open relays lately (which
> > they've shut as soon as we notified them). A couple of them used our
> > primary mail server as a smarthost, so ORBS listed it as well. In each
> > case, ORBS failed to notify us of the listing at all. We only found out
> > when our customers had mail blocked at servers using ORBS.
>
> I got notified when ORBS found one of the servers under my care to be
> open.
>
> Ah. Here's the copy of the notification that I got. They send to
> postmaster@Second.Level.Domain and
> postmaster@Hostname.Of.The.Mail.Server.
> That.Is.Found.To.Be.Open[0]. Question is, is someone answering
> postmaster@Your.Customers.Domains.And.Your.Own.Domains?
I have postmaster@hiwaay.net delivered to my mailbox (after procmailing
out the regular automated stuff). We also have several people that
check the abuse@hiwaay.net mailbox several times a day. Last time I
even checked our mail log for anything that might have been misdirected
or filtered out. No notification at all, multiple times now.
--
Chris Adams <cmadams@hiwaay.net>
Systems and Network Administrator - HiWAAY Information Services
I don't speak for anybody but myself - that's enough trouble.
