RE: Best TAC Services from Equipment Vendors

2024-03-09 Thread John van Oppen
That honestly is what my experience used to be but this has not been my 
observation recently, even when we as a large NSP provide all detail and 
literally ask about possible bugs.

From: NANOG  On Behalf Of Joel Esler
Sent: Thursday, March 7, 2024 11:46 AM
To: Pascal Masha 
Cc: nanog 
Subject: Re: Best TAC Services from Equipment Vendors

It may be a pain in the butt to get Cisco equipment, but their TAC is sublime.  
If something is critical enough, and you push hard enough, Cisco will move 
heaven and earth to solve your issue.



Re: registry for onmicrosoft[dot]com

2024-03-09 Thread Jay Acuna
On Sat, Mar 9, 2024 at 8:11 AM Travis Garrison  wrote:
>
> This would be a company that has registered for an office365 account.

> Office 365 company accounts are registered as companyname [dot] onmicrosoft 
> [dot] com.

The "companyname" part is evidently Not reliable.   Often the  name
[dot] onmicrosoft [dot] com is unrelated
to Any recognizable business or company name.

Companies can generate extra  onmicrosoft[dot]com  domain names.
Possibly an existing tenant for some unrelated company could add
nanog[dot]onmicrosoft[dot]com
and change it to their default domain, if they wanted.

Even if it were; the information could be tampered with on a compromised tenant
where the spammers simply change the names after breaching the tenant.

Likewise spammers might use robots to Signup for 365 services online, and
that there's little verification a requestor's Name and Company name exist
beyond the ability to charge whatever stolen payment method was
provided by the spammer.

Because it behaves like a dynamic domain;  with very low friction for
scammers to
generate new ones quickly.  It seems that  Refusing all mail from subdomains of
that domain  by default Other than specific ones you whitelist would
be a good policy.


> You then add domain aliases if you want to use your own preferred domain name.

> Thanks
> Travis
--
-JH