[76978] in North American Network Operators' Group
Re: Port 25 filters - how many here deploy them bidirectionally?
daemon@ATHENA.MIT.EDU (John Levine)
Sun Jan 9 12:20:38 2005
Date: 9 Jan 2005 17:20:10 -0000
From: John Levine <johnl@iecc.com>
To: nanog@nanog.org
In-Reply-To: <bb0e440a0501090625648426df@mail.gmail.com>
Errors-To: owner-nanog-outgoing@merit.edu
>Please consider the situation of net abuse with the source address
>being an infected PCs on a dialup pool that has port 25 filtering
>enabled.
> [ triangular routing ]
Back when Ernesto Haberli was active, this was his trademark
technique. He'd burn through large numbers of dialup accounts, but
hide the address of his high-speed connection.
At the time he left the business a few years ago it worked pretty well
and I gather he left because he'd run out of high speed ISPs to sign
up with. I'd be interested to know if triangular routing is used by
particular people now, or is it just another trick thrown into the mix
along with zombie proxies and such.
Regards,
John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
http://www.taugh.com
