On Thu, 28 Jul 2011 14:16:23 PDT, Brian R. Watters said:
Thanks .. their attempts to reach us are blocked via our Barrcacuda's due to
the fact that they are sending with a blank FROM: and as such Barracuda thinks
its SPAM
Please clarify. Are they sending
MAIL FROM:(syntactically
On Fri, Jul 29, 2011 at 2:46 AM, valdis.kletni...@vt.edu wrote:
And you might want to fix it, since your users will never get a bounce notice
from any RFC-compliant mailer - even if they *wanted* to know that their mail
wasn't delivered. is the RFC-standard way to denote this mail is a
On Fri, 29 Jul 2011 09:48:44 EDT, William Herrin said:
Correction: It's a standard way to denote that this mail is a bounce
report.
Correction to your correction: What the RFC actually says:
4.5.5. Messages with a Null Reverse-Path
There are several types of notification messages that
Cnn works
Charter pings but is SLOW
yahoo works.
Tracing route to ipv6.cnn.com [2620:100:e000::8001] over a maximum of
30
hops:
11 ms1 ms1 ms 2001:550:2400::1
21 ms1 ms1 ms 2001:550:2:1c::1:2
357 ms57 ms56 ms 2001:470:1f00:16::1
4
my DNS servers were getting slow so I blocked recursive queries for
all but my own network.
Then I was getting so many of these:
ns2 named[5056]: client 78.159.111.190#25345: query (cache)
'isc.org/ANY/IN' denied
that is was still slowing things down. I've since written a script to
watch the
Ping me offline, there are a few other folks who have seen this as well. The
isc.org record is commonly used in reflection attacks because the size of the
record is so large, so the amplification factor is greatly increased. Can you
check to see if +edns=0 was set in the query? That would be
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.
The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG,
CaribNOG and the RIPE Routing Working Group.
Daily listings are sent to
I see this all the time on my personal servers. I finally just told bind
to stop logging it.
On 07/29/2011 02:51 PM, Elliot Finley wrote:
my DNS servers were getting slow so I blocked recursive queries for
all but my own network.
Then I was getting so many of these:
ns2 named[5056]: client
We've been seeing this for several years on and off.
thanks,
-Drew
-Original Message-
From: Elliot Finley [mailto:efinley.li...@gmail.com]
Sent: Friday, July 29, 2011 2:51 PM
To: nanog@nanog.org
Subject: DNS DoS ???
my DNS servers were getting slow so I blocked recursive queries for
I've seen this for the same on about 3 sets of nameservers I operate. fail2ban
doing a 72 hour iptables drop rule.
-Original Message-
From: Drew Weaver [mailto:drew.wea...@thenap.com]
Sent: Friday, July 29, 2011 3:01 PM
To: 'Elliot Finley'; nanog@nanog.org
Subject: RE: DNS DoS ???
William Herrin wrote:
On Fri, Jul 29, 2011 at 2:46 AM, valdis.kletni...@vt.edu wrote:
And you might want to fix it, since your users will never get a bounce notice
from any RFC-compliant mailer - even if they *wanted* to know that their mail
wasn't delivered. is the RFC-standard way to
William Pitcock wrote:
On Thu, 28 Jul 2011 12:31:13 -0700 (PDT)
Brian R. Watters brwatt...@absfoc.com wrote:
We are looking for a SORBS contact as their web site and registration
process is less than friendly if somehow you get listed by them.
As I recall it, you can manually
BGP Update Report
Interval: 21-Jul-11 -to- 28-Jul-11 (7 days)
Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS
Rank ASNUpds % Upds/PfxAS-Name
1 - AS982929068 1.7% 34.0 -- BSNL-NIB National Internet
Backbone
2 - AS45899
This report has been generated at Fri Jul 29 21:12:25 2011 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org for a current version of this report.
Recent Table History
Date
On 29/07/2011 22:55, Michelle Sullivan wrote:
Friendly or non friendly response is usually gaugable in advance by the
tone of the initial email.
Which is usually gaugeable in advance by the tone of the customer
complaints that precipitated contact with SORBS in the first place.
Email is such a
On Jul 30, 2011, at 1:51 AM, Elliot Finley wrote:
my DNS servers were getting slow so I blocked recursive queries for all but
my own network.
This should be the standard practice. By operating an open recursor, you lend
your DNS server to abuse as a contributor to DNS
On 07/29/2011 12:24 PM, Nick Hilliard wrote:
On 29/07/2011 22:55, Michelle Sullivan wrote:
Friendly or non friendly response is usually gaugable in advance by the
tone of the initial email.
Which is usually gaugeable in advance by the tone of the customer
complaints that precipitated contact
On 28 July 2011 14:16, Brian R. Watters brwatt...@absfoc.com wrote:
Thanks .. their attempts to reach us are blocked via our Barrcacuda's due
to the fact that they are sending with a blank FROM: and as such Barracuda
thinks its SPAM .. just to darn funny .. I have whitelisted their domain so
Hello,
Is there someone from cableone on this distro that can contact me off list,
re: network outages , in parts of NM ?
Nick Hilliard wrote:
Email is such a lousy medium for this. We're all much more decent people
in person than over snarky emails.
Speak for yourself!
Landon Stewart wrote:
On 28 July 2011 14:16, Brian R. Watters brwatt...@absfoc.com wrote:
Thanks .. their attempts to reach us are blocked via our Barrcacuda's due
to the fact that they are sending with a blank FROM: and as such Barracuda
thinks its SPAM .. just to darn funny .. I have
On Sat, Jul 30, 2011 at 12:43 AM, Michelle Sullivan matt...@sorbs.net wrote:
Emailing random non-existent email addresses (such as
webmas...@sorbs.net) will earn you a listing...
webmaster@* isn't random, it's a fairly standard way to reach the
administrator of a service. A failure to support
22 matches
Mail list logo
