Re: [EXTERNAL] Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-23 Thread Validin Axon
alware list. > > > > Jim > > > > *From: *NANOG on behalf > of Validin Axon > *Date: *Tuesday, April 23, 2024 at 2:15 PM > *To: *Tom Beecher > *Cc: *NANOG > *Subject: *[EXTERNAL] Re: Help with removing DNS shinkhole FP from > Charter/Spectrum > > > > C

Re: [EXTERNAL] Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-23 Thread Rampley, Jim F
with removing DNS shinkhole FP from Charter/Spectrum CAUTION: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance. Tom, Thank you for this! It is very interesting that the behavior is intermittent. A friend of mine

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-23 Thread Validin Axon
Tom, Thank you for this! It is very interesting that the behavior is intermittent. A friend of mine who tested it this weekend saw correct answers on IPv6 and incorrect answers on IPv4. Kenneth On Tue, Apr 23, 2024 at 2:56 PM Tom Beecher wrote: > Validin, made an interesting observation on

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-23 Thread Tom Beecher
Validin, made an interesting observation on this. I am also a Spectrum residential customer, none of their equipment, run my own DNS server (pihole). My DHCP Assigned DNS servers are 2001:1998:f00:1::1 2001:1998:f00:2::1 bash-3.2$ dig -x 2001:1998:f00:1::1 +short dns-cac-lb-01.rr.com.

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-23 Thread Validin Axon
Hi Jason, > I suspect what’s happened is an incorrect assumption that DNS is even the issue here. Because you mentioned Spectrum Shield, I suspect it is not. I appreciate the response and links. However, I've been told repeatedly by Spectrum that they're not blocking with Spectrum Shield.

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-23 Thread Livingood, Jason via NANOG
> However, there's no correction process for Spectrum's DNS sinkhole > But back to the topic: someone mentioned to me that Spectrum may not be the > direct providers for the DNS services they provide to their customers. If > anyone knows anything about how I might discover and reach out to the

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread John R. Levine
I'm not sure where you saw that message, but I got this message via email after I submitted an unblock request with Spectrum Shield: We have reviewed your request to unblock validin.com. This site was not found to be blocked by Spectrum Shield and should be accessible from your browser.

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread John R. Levine
Bill is absolutely correct. The spammers lost their case because they were demonstrably spammers. No, really they did not. I read the decisions. Have you? Hint: under CAN SPAM a great deal of spam is completely legal so it didn't matter. We’ve had accidental black hole cases with *US*

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread William Herrin
On Mon, Apr 22, 2024 at 5:54 PM Validin Axon wrote: > Hi Bill, > > I'm not sure where you saw that message, but I got this > message via email after I submitted an unblock request with Spectrum Shield: Howdy, That was Christopher, not me. But you should check the talos link I sent you

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread Validin Axon
Hi Bill, I'm not sure where you saw that message, but I got this message via email after I submitted an unblock request with Spectrum Shield: > We have reviewed your request to unblock validin.com. This site was not found to be blocked by Spectrum Shield and should be accessible from your

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread Mel Beckman
Bill is absolutely correct. The spammers lost their case because they were demonstrably spammers. We’ve had accidental black hole cases with *US* providers that removed the block once they received a C If they don’t have iron clad proof in hand. (More than just a few complaints and no traffic

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread William Herrin
On Mon, Apr 22, 2024 at 5:07 PM John R. Levine wrote: > a complaint would have to show that the > blocking was malicious rather than merited or accidental. In this case it > seems probably accidental, but for all I know there might have been bad > traffic to merit a block. Hi John, I'll try

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread John R. Levine
On Mon, 22 Apr 2024, William Herrin wrote: Respectfully, you're mistaken. Look up "tortious interference." I'm familiar with it. But I am also familar with many cases were spammers have sued network operators claiming that they're falsely defamed, so the operator has to deliver their mail.

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread Christopher Morrow
“We checked the website you are trying to access for malicious and spear-phishing content and found it likely to be unsafe.” perhaps charter thinks there's a reason to not permit folks to access a possibly dangerous site? (it's also possible it just got cough up amongst some other stuff in the

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread William Herrin
On Mon, Apr 22, 2024 at 4:00 PM John Levine wrote: > It appears that William Herrin said: > >If you can't reach a technical POC, use the legal one. Your lawyer can > The only response to a letter like that is "we run our network to > serve our customers and manage it the way we think is best"

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread John Levine
It appears that William Herrin said: >On Sun, Apr 21, 2024 at 6:21 PM Validin Axon wrote: >> Looking for some help/advice. Spectrum is sinkholing my company's domain, >> validin[.]com, to 127.0.0.54. > >Howdy, > >If you can't reach a technical POC, use the legal one. Your lawyer can >find the

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread Validin Axon
Hi Mel, I appreciate the suggestion. During my earlier research, I'd noticed that as well. However, the DNS block includes all validin.com subdomains, covering those on completely different ASNs. It also does NOT affect other domains that resolve to the exact same IP addresses (e.g.,

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread Mel Beckman
I notice from MXToolbox.com that your domain’s IP address is on the UCEPROTECTL3 blacklist. This is a notoriously evil blacklist that charges people for removal. This may be why Spectrum is blackholing your domain. Most respectable ISPs won’t use it. But Spectrum… There is no delisting

Re: Help with removing DNS shinkhole FP from Charter/Spectrum

2024-04-22 Thread William Herrin
On Sun, Apr 21, 2024 at 6:21 PM Validin Axon wrote: > Looking for some help/advice. Spectrum is sinkholing my company's domain, > validin[.]com, to 127.0.0.54. Howdy, If you can't reach a technical POC, use the legal one. Your lawyer can find the appropriate recipient and write a