Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking )

2007-07-24 Thread Chris L. Morrow



On Tue, 24 Jul 2007, Paul Ferguson wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 - -- Christopher Morrow [EMAIL PROTECTED] wrote:

 I'd love to see CPE dsl/cable-modem providers integrate with a 'service'
 that lists out 'bad' things. it'd be nice if the user could even tailor
 that list (just CC or CC + child-porn or CC older not than X
 days/hours/minutes) ... I think it might even help, and be vendor
 agnostic (from a provide and hardware) perspective.

 Ironically, that is exactly part of a product announcement that
 we (Trend Micro) are making on 30 July.

neat, if only our marketting folks would see such benefits :( good for
you! :)


 Since this topic arose, I saw Trend mentioned as a possible
 product culprit in this scenario, but it isn't. Yet. :-)

not a culprit so much as a way that this sort of dns redirection could
have been done, in a vendor supplied/supported device even.


 The particular service to be announced on Monday (BIS, or Botnet
 Identification Service), is nothing more than a BGP feed of _known_
 and _vetted_ botnet CCs as /32s, intended to be a black-hole feed.

 Interested folks should either e-mail me off-list, or just wait for
 the official announcement on 30 July.


note that this will take out vhost systems... unless they are vetted off
the list, which is certainly possible of course.


Email lists pertaining to NA colo sites?

2007-07-24 Thread Tuc at T-B-O-H.NET

Hi,

I was wondering if someone was running a single repository of
lists run by either Colo sites, or others in support of colo sites,
in the North America. (Like for 25 Broadway {Adam?}, or even more
specifically 118th, 5th floor, room 518 and anyone that might be in
that room in the next week or so. :) )  Maybe there is a general 
list where someone can post Hey, I'm in 25B, 5th floor and I need
a patch cable or even more specifically Hey, I need someone who
can get to my cabinet at the specificied location and use a pen
to reboot one of my servers so I can save the $43.75 and not spend
$5 in gas, $6 for tolls, and $17 for parking to press a button, wait
30 seconds, and press again. 

Thanks, Tuc


Re: San Francisco Power Outage

2007-07-24 Thread Jonathan Lassoff


Well, the fact still remains that operating a datacenter smack-dab in
the center of some of the most inflated real estate in recent history
is quite a castly endeavor.
I really wouldn't be all that surprised if 365 Main cut some corners
here and there behind the scenes to save costs while saving face.

As it is, they don't have remotely enough power to fill that facility
to capacity, and they've suffered some pretty nasty outages in the
recent past. I'm strongly considering the possibility of completely
moving out of there.

--j

On 7/24/07, Patrick Giagnocavo [EMAIL PROTECTED] wrote:



On Jul 24, 2007, at 6:54 PM, Seth Mattinen wrote:

 I have a question: does anyone seriously accept oh, power trouble
 as a reason your servers went offline? Where's the generators? UPS?
 Testing said combination of UPS and generators? What if it was
 important? I honestly find it hard to believe anyone runs a
 facility like that and people actually *pay* for it.


Sad that the little Telcove DC here in Lancaster, PA, that Level3
bought a few months ago, has weekly full-on generator tests where
100% of the load is transferred to the generator, while apparently
large DCs that are charging premium rates, do not.

Cordially

Patrick Giagnocavo
[EMAIL PROTECTED]







--
Jonathan Lassoff
echo thejof | sed 's/^/jof@/;s/$/.com/'
http://thejof.com
GPG: 0xC8579EE5