[77012] in North American Network Operators' Group
Re: New and interesting network abuse.
daemon@ATHENA.MIT.EDU (Adrian Chadd)
Tue Jan 11 04:02:04 2005
Date: Tue, 11 Jan 2005 09:01:18 +0000
From: Adrian Chadd <adrian@creative.net.au>
To: nanog@nanog.org
In-Reply-To: <F19526C0E4A5124EB204C94489F6978B015B43B4@bnaw2kmsx01.BNA01.ISDN.NET>
Errors-To: owner-nanog-outgoing@merit.edu
On Tue, Jan 11, 2005, Ejay Hire wrote:
>
> My apologies if this strays off topic, but I wanted to share my recent
> experience.
>
> We had a collocation customer come in and request a t1 of pots lines for
> their servers, then complaints that their "security" software wasn't
> working because of our RPF checks. As it turns out they were dialing up
> to a local isp, and sending bulk email using our bandwidth, but the
> dial-up's ip.... And receiving the TCP ack on the dial up.
Its not new. In fact, its so not new, I think those involved could quite
happily believe its very clever. :)
Adrian
--
Adrian Chadd "You don't have a TV? Then what's
<adrian@creative.net.au> all your furniture pointing at?"