Re: Yahoo to MSN problems

2004-05-19 Thread J.D. Falk
On 05/19/04, Hank Nussbacher <[EMAIL PROTECTED]> wrote: > Anyone know more? Things looked better today, but past experience shows that they may get awful again in a few days. While the problem may appear to be more on our (Hotmail's) end than Yahoo's, the volume of

Yahoo to MSN problems

2004-05-19 Thread Hank Nussbacher
http://help.yahoo.com/help/us/groups/messages/messages-19.html Attention Hotmail and MSN users Hotmail and MSN mail users are currently experiencing delays of up to 1 day in receiving Groups messages. If delays exceed this, we may begin to not deliver older messages. We are sorry that you are ex

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread joe
Folks, If I may offer a humble opinion here before this gets out of hand. I see many (me included) trying to side step the issue that SMTP is a broken and insecure protocol for that of electronic messages(ing). I see folks blacklisting, RBLing, and other methods in an attempt to fix the issue, wh

RE: Cisco's Statement about IPR Claimed in draft-ietf-tcpm-tcpsecure

2004-05-19 Thread Terry Baranski
>>> The same document that fully ignores that port number >>> randomness will severely limit the risk of susceptibility >>> to such an attack? >> >> How many zombies would it take to search the port number >> space exhaustively? > > Irrelevant. > > The limiting factor here is how many packets c

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Wed, 2004-05-19 at 17:47, Randy Bush wrote: > gosh! maybe someone should set up a mailing list to discuss > spam, anti-spam, ...? > > you mean they have? well, then maybe a bunch of us network > operators (as opposed to spam weenies) should go over there > and talk about sdh, router configs

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Randy Bush
gosh! maybe someone should set up a mailing list to discuss spam, anti-spam, ...? you mean they have? well, then maybe a bunch of us network operators (as opposed to spam weenies) should go over there and talk about sdh, router configs, circuit provisioning, etc. get a clue, spam weenies!

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 7:06 PM, James Couzens wrote: > I just did this on 5 spam in my mail box, I got: [domains ommitted--tripped my filters] my last 10 survivors are at http://www.ehsco.com/misc/last-10-spams.eml the relevant data for them in order of occurrance is below. eight are CN, one is KR, one

RE: Barracuda Networks Spam Firewall

2004-05-19 Thread Brian Battle
Title: RE: Barracuda Networks Spam Firewall Eric, > There's one rule that will wipe out ~90% of spam, but nobody seems to have > written it yet. > >  if URL IP addr is in China then score=100 > > support for a generic lookup list of cidr blocks would get another 9% I agree that geographic

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Couzens wrote: | On Wed, 2004-05-19 at 16:24, Eric A. Hall wrote: | |>extract hostname from url, dig on hostname, whois on addr, and nine times |>out of ten the host is in a CN netblock. that's from the spam that gets |>into my mailbox. | | | Yes

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 6:38 PM, Stephen J. Wilcox wrote: > Altho this is probably not true if you're one of the billion or so > people who live in or around China or are of Chinese origin.. just check for charset=US-ASCII first. come to think of it, ASCII would probably give half the necessary weight alo

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Wed, 2004-05-19 at 16:24, Eric A. Hall wrote: > extract hostname from url, dig on hostname, whois on addr, and nine times > out of ten the host is in a CN netblock. that's from the spam that gets > into my mailbox. Yes I understand that is what you meant. I just did this on 5 spam in my mail b

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Randy Bush
perhaps this all belongs on alt.jingo.weenies? can we focus on network operations not network exclusionism? this is worse than spam.

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Dan Hollis
On Thu, 20 May 2004, Stephen J. Wilcox wrote: > On Wed, 19 May 2004, Richard Cox wrote: > > While this is verging off our remit here, I would clarify the point > > originally made, which is that if a URL - that is, a URL cited in the > > body of a message - points to an IP physically located in Ch

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Stephen J. Wilcox
On Wed, 19 May 2004, Richard Cox wrote: > While this is verging off our remit here, I would clarify the point > originally made, which is that if a URL - that is, a URL cited in the > body of a message - points to an IP physically located in China, then > that signals a high probability of the me

FW: RE: List of dynamic IP's

2004-05-19 Thread Nicole
Not Ip's but domain names etc I block. You can perhaps generate some from this? http://www.unixgirl.com/blockeddomains.html Nicole On 19-May-04 the GW commando coersion squad reported Bob Martin said : > > Does anyone know of a list of dynamic IP's by ISP? > I'm looking for something a

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 6:19 PM, James Couzens wrote: > On Wed, 2004-05-19 at 15:28, Eric A. Hall wrote: > Going through the spam that I've got access to (and it is a substantial > amount allbeit not in the millions of spam per day) I can't seem to > associate the spam with chinese urls, and certainly not

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Wed, 2004-05-19 at 15:28, Eric A. Hall wrote: > not connection address, not domain 'owner', but URL->Hostname->IP_ADDR > > What's most interesting about the half-dozen accusations of xenophobia > I've received (off-list and on) is that they've almost all come from > foreigners. I promise not t

Re: List of dynamic IP's

2004-05-19 Thread Adam 'Starblazer' Romberg
Now if I read that page, it's no longer available for public access, if you purchase it, it may be of some use for you.. other than that, I do not know. *-1 for jumping an idea without researching* Thanks, Adam Adam 'Starblazer' Romberg

Re: List of dynamic IP's

2004-05-19 Thread Adam 'Starblazer' Romberg
> Does anyone know of a list of dynamic IP's by ISP? By ISP, no, but this may be of interest, http://www.mail-abuse.org/dul/ Thanks, Adam Adam 'Starblazer' Romberg Appleton: 920-738-9032 System Administrator Valley Fair: 920-968-77

List of dynamic IP's

2004-05-19 Thread Bob Martin
Does anyone know of a list of dynamic IP's by ISP? I'm looking for something akin to this list from AOL http://postmaster.info.aol.com/info/servers.html TIA Bob Martin

Slides for NANOG31 IPsec tutorial

2004-05-19 Thread Duane Wessels
If you plan to attend Sunday's hands-on tutorial for using the IPsec server at NANOG, you may want to have a look at the slides in advance. You can find them at: http://www.packet-pushers.net/NANOG/ipsec/ Unix users, in particular, may need to prepare their systems by building a new kernel and/

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Richard Cox
On 19 May 2004 15:12:29 -0700 James Couzens <[EMAIL PROTECTED]> wrote: |> if URL IP addr is in China then score=100 | I beg to differ Eric A. Hall. ... | | So contrary to what you said, perhaps I should just Null Route all | email originating from the USA? ;) While this is verging off our remi

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Eric A. Hall
On 5/19/2004 5:12 PM, James Couzens ([EMAIL PROTECTED]) wrote: > On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: > >> There's one rule that will wipe out ~90% of spam, but nobody seems to >> have written it yet. >> >> if URL IP addr is in China then score=100 ^^^ not connection address

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Dan Hollis
On Wed, 19 May 2004, James Couzens wrote: > On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: > > There's one rule that will wipe out ~90% of spam, but nobody seems to have > > written it yet. > > if URL IP addr is in China then score=100 > I beg to differ Eric A. Hall. No Eric is quite correc

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread Steven Champeon
on Wed, May 19, 2004 at 03:12:29PM -0700, James Couzens wrote: > On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: > > > There's one rule that will wipe out ~90% of spam, but nobody seems to have > > written it yet. > > > > if URL IP addr is in China then score=100

Re: Barracuda Networks Spam Firewall

2004-05-19 Thread James Couzens
On Tue, 2004-05-18 at 21:49, Eric A. Hall wrote: > There's one rule that will wipe out ~90% of spam, but nobody seems to have > written it yet. > > if URL IP addr is in China then score=100 I beg to differ Eric A. Hall. According to statistics gathered by the Spamhaus Project (http://www.sp

Re: Secondary MX user list filter for Sendmail

2004-05-19 Thread Crist Clark
Todd Vierling wrote: A colleague asked me offlist about how to make a Sendmail secondary MX properly return 550 for invalid recipient addresses. [snip] For those with an LDAP directory containing mailbox information, I'd recommend using sendmail's built-in LDAP capabilities. I've found it a good wa

Goddard SFC

2004-05-19 Thread Jason McCormick
If anyone at Goddard Space Flight Center (gsfc.nava.gov) is on the list, can you please contact me off-list about an e-mail blocking issue? -- Jason McCormick [EMAIL PROTECTED] GPG Fingerprint: 66C5 2B15 3E34 2B5E 5321 6147 303A DCE6 0A74 A19C

Re: backscatter hosts

2004-05-19 Thread John Capo
Quoting Steven Champeon ([EMAIL PROTECTED]): > > It's not really my business why a hotmail.com MX accepted mail it > couldn't deliver. I could care less /why/. It's up to hotmail to fix > their systems - I don't care how they perform that background check on > quota. Exactly. > > It's my busi

Suppressed Routes AS30174 & 17090 ?

2004-05-19 Thread P.Schroebel
  Hello Folk,           I was wondering if in-fact any of our routes are being suppressed either via our ASN 30174 or any of our ip space 66.164.0.0/16 or 66.79.96.0/20. Given and Granted that we have had rotten history of sorts. However, we really have cleaned up our networks and rid oursel