[60941] in North American Network Operators' Group
RE: To send or not to send 'virus in email' notifications?
daemon@ATHENA.MIT.EDU (Mark Segal)
Wed Aug 20 10:51:07 2003
From: Mark Segal <MSegal@Corporate.FCIBroadband.com>
To: "'nanog@merit.edu'" <nanog@merit.edu>
Date: Wed, 20 Aug 2003 10:45:48 -0400
Errors-To: owner-nanog-outgoing@merit.edu
All of "my" bounces are coming from emails that originated from
195.157.87.253... Maybe it's the same guy with others here?
Mark
Fyi..
netadmin@aaa-01:~> whois -h whois.ripe.net 195.157.87.253
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum: 195.157.70.0 - 195.157.87.255
netname: NSUK-PARTITION-LL
descr: Connectivity
country: GB
admin-c: NSUK2-RIPE
tech-c: NSUK1-RIPE
status: LIR-PARTITIONED PA
remarks: **************************************************************
remarks: * Please do not send abuse reports to tech or admin contacts *
remarks: * All abuse reports to abuse@netscalibur.co.uk *
remarks: **************************************************************
remarks: * This is an partition object and does not represent a valid #
remarks: # assignment. Valid assignments have status: ASSIGNED PA #
remarks: ##############################################################
notify: ripe@netscalibur.co.uk
mnt-by: NETSCALIBURUK-MNT
mnt-lower: NETSCALIBURUK-MNT
changed: ripe@netscalibur.co.uk 20011025
changed: ripe@netscalibur.co.uk 20020110
changed: ripe@netscalibur.co.uk 20020514
source: RIPE
route: 195.157.0.0/16
descr: Netscalibur UK Ltd
origin: AS8272
mnt-by: NETSCALIBURUK-MNT
changed: ripe@netscalibur.co.uk 20010706
source: RIPE
role: Netscalibur UK Hostmaster
address: Netscalibur UK Ltd
address: 9 Selsdon Way
address: Cityharbour
address: London E14 9GL
address: UK
phone: +44 (0)870 887 8800
fax-no: +44 (0)870 887 8867
e-mail: hostmaster@netscalibur.co.uk
admin-c: CSP3-RIPE
admin-c: SY131-RIPE
tech-c: NSUK1-RIPE
tech-c: NSUK3-RIPE
nic-hdl: NSUK2-RIPE
remarks: Hostmaster
remarks: ****
remarks: * All abuse reports to abuse@netscalibur.co.uk
remarks: ****
notify: ripe@netscalibur.co.uk
mnt-by: NETSCALIBURUK-MNT
changed: ripe@netscalibur.co.uk 20010712
changed: ripe@netscalibur.co.uk 20010731
changed: ripe@netscalibur.co.uk 20020109
changed: ripe@netscalibur.co.uk 20020116
source: RIPE
role: Netscalibur UK NOC
address: Netscalibur UK Ltd
address: 9 Selsdon Way
address: Cityharbour
address: London E14 9GL
address: UK
phone: +44 (0)845 117 2200
fax-no: +44 (0)870 887 8867
e-mail: noc@netscalibur.co.uk
admin-c: ZP64-RIPE
admin-c: DJH8-RIPE
tech-c: NSUK2-RIPE
tech-c: NSUK3-RIPE
nic-hdl: NSUK1-RIPE
remarks: Network Operations Center
remarks: ****
remarks: * All abuse reports to abuse@netscalibur.co.uk
remarks: ****
notify: ripe@netscalibur.co.uk
mnt-by: NETSCALIBURUK-MNT
changed: ripe@netscalibur.co.uk 20010711
changed: ripe@netscalibur.co.uk 20020116
source: RIPE
--
Mark Segal
Director, Network Planning
FCI Broadband
Tel: 905-284-4070
Fax: 416-987-4701
http://www.fcibroadband.com
Futureway Communications Inc. is now FCI Broadband
-----Original Message-----
From: Jim Deleskie [mailto:jdeleski@rci.rogers.com]
Sent: August 20, 2003 10:36 AM
To: nanog@merit.edu
Subject: RE: To send or not to send 'virus in email' notifications?
Kind of like a statement made @ a security conference I was recently at,
'Hacking from the conference = Dismissal, if you have to ask No you
shouldn't'
-----Original Message-----
From: Gregory Hicks [mailto:ghicks@cadence.com]
Sent: Wednesday, August 20, 2003 10:30 AM
To: nanog@merit.edu; jmaimon@ttec.com
Subject: Re: To send or not to send 'virus in email' notifications?
> Date: Wed, 20 Aug 2003 10:25:28 -0400
> From: Joe Maimon <jmaimon@ttec.com>
> To: nanog@merit.edu
> Subject: To send or not to send 'virus in email' notifications?
>
>
> Considering the amount of email traffic generated by responding to
> forged virus laden email from culprits like sobig should email virus
> scanning systems be configured to send notifications back to sender or
not?
Not.