[59284] in North American Network Operators' Group
Re: ISPs are asked to block yet another port
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Mon Jun 23 16:50:30 2003
Date: Mon, 23 Jun 2003 20:49:26 +0000 (GMT)
From: "Christopher L. Morrow" <chris@UU.NET>
To: Paul Vixie <paul@vix.com>
Cc: nanog@merit.edu
In-Reply-To: <20030623202022.B327B13948@sa.vix.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 23 Jun 2003, Paul Vixie wrote:
>
> > Its a sucky world sometimes. Perhaps Paul complained to
> > ATT/<other-unnamed-provider> with logs and such? :)
>
> oh yes. i tried *several* ways to get their attention. however, this
> kind of activity is so common these days that a noc literally has no
> choice but to focus their efforts on less common and more damaging
> things than relayprobing. so i was not shocked that they did not
> answer me.
So, for <unnamed-provider-X> you have a Abuse Ticket number? Perhaps you
could send the one you think might apply to me off-list? :)
>
> > > so if you're going to block tcp/25 SYNs on outbound, please make sure
> > > you block SYN/ACK's on input too, or else you just give the spammers a
> > > little more work to do instead of a lot more work to do.
> >
> > Yup, this is in the works also... and yes, someone realized quickly enough
> > that the one-way filtering was dumb. oh well. live and learn!
>
> that's good news, thanks for sharing it. any schedule for a fix :-) ??
>
I do not know what the timeframe is :( Sorry.
