Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Bryan Fields
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/25/23 8:24 PM, Greg Dickinson wrote: > He didn’t, I was just referencing Mimecast to indicate it was probably > larger than Charter’s DNS. Given the reports that someone else gave from > Virustotal, it seems it’s more widespread than first

Re: [EXTERNAL] Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Bryan Fields
On 10/25/23 4:58 PM, Compton, Rich A wrote: > Charter uses threat intel from Akamai to block certain "malicious" domains. Does charter do this on signed domains too? -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

RE: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Greg Dickinson
He didn’t, I was just referencing Mimecast to indicate it was probably larger than Charter’s DNS. Given the reports that someone else gave from Virustotal, it seems it’s more widespread than first reported. Greg Dickinson, CCNA Network Engineer

Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Sylvain BAYA
Dear NANOG-er, Hope this email finds you in good health! Please see my comments below, inline... Thanks, Le 25/10/2023 à 18:50, Jason J. Gullickson via NANOG a écrit : I've been working for a week or so to solve a problem with DNS resolution for Charter customers for our domain

Re: [EXTERNAL] Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Compton, Rich A
VirusTotal and other domain reputation sites say the domain is malicious. Specifically there have been multiple malware samples that were scanned (latest was 10-09-2023) that had this domain hard coded in it. https://www.virustotal.com/gui/domain/bonesinjars.com You may want to get a new

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Bryan Fields
On 10/25/23 2:41 PM, Greg Dickinson wrote: If it helps troubleshooting, when I click the domain in the email Mimecast tells me: “We checked the website you are trying to access for malicious and spear-phishing content and found it likely to be unsafe.” I saw nothing referencing Mimecast in

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Jason J. Gullickson via NANOG
That does help Greg. I've heard from a few other folks on the list that the domain is considered suspicious by a few different providers like this. It's a turnkey Squarespace gallery/ecommerce site so I'm not sure why it would be classified as a threat, but perhaps a previous domain holder

Re: XGS-PON & "Dedicated" Service

2023-10-25 Thread Sven Schade
Hi, Another way could be the splitting factor. If you work with 1:8 you have an excellent 1G connection. Best Svens Am 25.10.2023 um 06:19 schrieb Mark Tinka: On 10/25/23 01:56, Neader, Brent wrote: Hello! Interested in getting the larger community’s thought on this. The primary question

RE: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Greg Dickinson
If it helps troubleshooting, when I click the domain in the email Mimecast tells me: “We checked the website you are trying to access for malicious and spear-phishing content and found it likely to be unsafe.” Greg Dickinson, CCNA Network Engineer

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Mark Andrews
It’s being filtered. Only Charter can tell you why. -- Mark Andrews > On 26 Oct 2023, at 05:07, Jason J. Gullickson via NANOG > wrote: > >  > I've been working for a week or so to solve a problem with DNS resolution for > Charter customers for our domain bonesinjars.com. I've reached-out

Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Jason J. Gullickson via NANOG
I've been working for a week or so to solve a problem with DNS resolution for Charter customers for our domain bonesinjars.com. I've reached-out to Charter directly but since I'm not a customer I couldn't get any help from them. I was directed by a friend to this list in hopes that there

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-25 Thread Owen DeLong via NANOG
In fairness, however, there is a natural tendency for many of those PNIs to be built in locations in common with IXPs and often they start as IXP connections and with growth of traffic end up migrating to PNIs for further expansion. Owen > On Oct 24, 2023, at 18:15, Randy Bush wrote: > >>

US Bancorp

2023-10-25 Thread Eric C. Miller
Is there anyone from USBancorp here that can help me troubleshoot a lossy connection from an employee VPN? Eric