[9812] in North American Network Operators' Group
Re: Information re: Cyberpromo
daemon@ATHENA.MIT.EDU (Nathan Stratton)
Tue Jun 3 18:58:05 1997
Date: Tue, 3 Jun 1997 18:39:08 -0400 (EDT)
From: Nathan Stratton <nathan@netrail.net>
To: Danny McPherson <danny@genuity.net>
cc: "Martin J. Hannigan" <hannigan@firefly.net>,
Dalvenjah FoxFire <dalvenjah@dal.net>, nanog@merit.edu
In-Reply-To: <199706030554.WAA24966@cognition.genuity.net>
On Mon, 2 Jun 1997, Danny McPherson wrote:
>
> >
> > Was that some wrappered service? Looked like tcp_wrappers.
> > I think a router with enough memory would be a better performer
> > for filtering activies at that layer.
> >
> > I did go ahead and install the relay denial rulesets published on
> > sendmail.org for 8.8.x and they work fine. Cyberpromo appears to
> > have been using "Cyberbomber" on our ports.
> >
> > I guess I'm naive, but I thought NAPS wanted to stop this kind
> > of thing, and most had explicit rules about it. Guess not. Back to
> > the clue-store with me. :-/
>
> are you suggesting that providers filter /16's because they were spammed from
> a host in some tiny portion of the block..? i'd bet it wouldn't take two
> days, much less two weeks, to receive complaints from our own customer's (or
> any moderately large provider's) for that sorta thing...
>
> one semi-solution would be to receive vixie's spam feed, at least it's as
> precise as possible .. and less headache.
Not just /16, but all of AGIS IP space.
Nathan Stratton President, NetRail,Inc.
------------------------------------------------------------------------
Phone (888)NetRail NetRail, Inc.
Fax (404)522-1939 230 Peachtree Suite 500
WWW http://www.netrail.net/ Atlanta, GA 30303
------------------------------------------------------------------------
"No king is saved by the size of his army; no warrior escapes by his
great strength. - Psalm 33:16
