[37978] in North American Network Operators' Group
Re: Scanning (was Re: Stealth Blocking)
daemon@ATHENA.MIT.EDU (Christopher A. Woodfield)
Sat May 26 10:38:14 2001
Date: Sat, 26 May 2001 10:35:47 -0400
To: "Greg A. Woods" <woods@weird.com>
Cc: William Allen Simpson <wsimpson@greendragon.com>, nanog@merit.edu
Message-ID: <20010526103547.A15341@semihuman.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20010524180402.0751CEF@proven.weird.com>; from woods@weird.com on Thu, May 24, 2001 at 02:04:02PM -0400
From: "Christopher A. Woodfield" <rekoil@semihuman.com>
Errors-To: owner-nanog-outgoing@merit.edu
About two years ago the <vijay> promising local ISP </vijay> I worked
for saw the number or ORBS-listed hosts withing its netspace go from ~400
to over 3,000 in one week. Among the listings was a class C where EVERY HOST,
254 IPs, in the block was listed. Granted, each one was an open relay, but the
point is that each IP was individually relay tested. When questioned about
this, Alan Brown reponded that he had "received an unusually large number
of nominations" for hosts in our netspace. Uh huh. Sure.
-C
On Thu, May 24, 2001 at 02:04:02PM -0400, Greg A. Woods wrote:
>
> [ On Thursday, May 24, 2001 at 08:52:07 (-0400), William Allen Simpson wrote: ]
> > Subject: Scanning (was Re: Stealth Blocking)
> >
> >
> > (The problem with ORBS was not the scanning, but rather the aggressive
> > nature of the scanner,
>
> ORBS does not scan. Period.
>
> If you believe it does then prove it with complete logs that can be
> verified by looking through the ORBS database.
>
> --
> Greg A. Woods
>
> +1 416 218-0098 VE3TCP <gwoods@acm.org> <woods@robohack.ca>
> Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>
>
--
---------------------------
Christopher A. Woodfield rekoil@semihuman.com
PGP Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB887618B
