How often does Google's Safe Browsing system expire URLs that are 404?
Hello, Numerous customers that have had phishing issues reported to them as a result of Google’s Safe Browsing program have taken care of said issues. The URL(s) reported to them either return a 404 or 5xx error but the URL stays listed, according to the GSB’s API, for weeks afterwards. Does anyone know: 1) Is there some kind of expiry time on URLs flagged as unsafe by GSB 2) Is there some way for *us* (the provider) to trigger a review of the URL to speed this process up? Harassing the client to login to the webmaster portal and request a review can be a cat herding exercise. Thanks for any info you might have. — Landon Stewart Lead Analyst - Abuse and Security Management INAP® lstew...@inap.com www.inap.com signature.asc Description: Message signed with OpenPGP
Re: really amazon?
On Jul 31, 2019, at 1:13 PM, Scott Christopher wrote: > > Valdis Klētnieks wrote: > >> On Wed, 31 Jul 2019 16:36:08 -, Richard Williams via NANOG said: >> >>> To contact AWS SES about spam or abuse the correct email address is >>> ab...@amazonaws.com >> >> You know that, and I know that, but why doesn't the person at AWS whose job >> it >> is to keep the ARIN info correct and up to date know that? > > Because it will get spammed if publicly listed in WHOIS. Not an excuse. I’m saying this on behalf of ALL the other ASNs that keep their POCs up to date. signature.asc Description: Message signed with OpenPGP
Re: Power cut if temps are too high
On May 27, 2019, at 11:00 AM, Dovid Bender wrote: > > Hi, > > Is anyone aware of a device that will cut the power if the room goes above X > degrees? I am looking for something as a just in case. I would personally make one with an ESP32 (micro controller with wifi) and a (normally closed) relay. You could trigger it to open the circuit when the temperature is too high. Did a quick google for this and found something to at least explain wtf I’m talking about: https://techtutorialsx.com/2018/02/17/esp32-arduino-controlling-a-relay/ <https://techtutorialsx.com/2018/02/17/esp32-arduino-controlling-a-relay/> -- Landon Stewart Lead Analyst - Abuse and Security Management INAP® lstew...@inap.com www.inap.com signature.asc Description: Message signed with OpenPGP
Re: Extraneous "legal" babble--and my reaction to it.
"Email Disclaimers: Legal Effect in American Courts" - http://www.rhlaw.com/blog/legal-effect-of-boilerplate-email-disclaimers/ "Automatic e-mail footers are not just annoying. They are legally useless" - http://www.economist.com/node/18529895
Re: Debian RWHOIS
On Jul 8, 2015, at 3:12 PM, Jeff Walter jwal...@weebly.com wrote: Without mincing words he basically told me RWHOIS was dead. Someone please tell Spamhaus. Landon Stewart landonstew...@gmail.com signature.asc Description: Message signed with OpenPGP using GPGMail
Re: World's Fastest Internet™ in Canadaland
On Jun 26, 2015, at 11:40 AM, TR Shaw ts...@oitc.com wrote: But what about us in Northwestern Ontario who can only get dialup, if that, from Bell? Seriously - write to your MP and MLA. Landon Stewart landonstew...@gmail.com signature.asc Description: Message signed with OpenPGP using GPGMail
Re: Password Decryption Methods?
On Jun 2, 2015, at 9:23 AM, Michael O Holstein michael.holst...@csuohio.edu wrote: If you can share the other details (make, model, firmware revision, processor type, etc.) .. whatever you know and can share) .. it would be more helpful. Also, how'd you get the hash? .. from a config file backup or from another device that used it to access this one? If so, what software, etc. Serial # too. :-D signature.asc Description: Message signed with OpenPGP using GPGMail
Re: Large Ontario DC busted for hosting petabytes of child abuse material
On Mar 2, 2015, at 10:03 AM, Mike A mi...@mikea.ath.cx wrote: On Mon, Mar 02, 2015 at 05:53:33PM +, Naslund, Steve wrote: Don't know who this is but the legalities are pretty clear I think. The DC is not required to know what data is stored but if the cops can prove that someone DID know what was stored, that person can be criminally charged. IANAL but I have worked with LE on a similar case and that is how it was explained to us by the FBI. It will be hard to prove anyone knew however since anyone that knew and did not report it committed a crime. Charging the company will be a stretch unless they can prove that at least one corporate officer knew. Otherwise the company will fire whichever employee knew and say He should have told us. This is all about who knew what and when. True in the USA, I think; but what about Canadian law? AFAIK it's generally the same in Canada. If a provider is aware of (reported, accidental discovery or otherwise) the existence of child pornography on their network that existence must be reported to LE and the content must be cease to be publicly available. What I've done in the past when such a report is received is created an archive of the whole directory and subdirectories in question, collected all the customer data related to the account including logs of logins and file transfers and sent that directly to law enforcement and through https://www.cybertip.ca/ https://www.cybertip.ca/. Some information for Canadian service providers is in the reporting system itself: https://www.cybertip.ca/app/en/service_provider_report signature.asc Description: Message signed with OpenPGP using GPGMail
Re: North Korean internet goes dark (yes, they had one)
On Dec 23, 2014, at 11:53 AM, Javier J jav...@advancedmachines.us wrote: What would be the point in blocking them? They don't even have electricity in the country, what would I worry about coming out of their IP block that wouldn't be more interesting than dangerous. Pretty obvious if it was really them behind the Sony hack, it was outsourced. For the few elite that do have Internet in DPRK it would be 1) a big inconvenience which would annoy them a lot and 2) they have to transmit what they want attacked to the outsourced crew (whoever they might be) somehow. I doubt the outsourced group has a fax#. signature.asc Description: Message signed with OpenPGP using GPGMail
Re: Why are there no GeoDNS solutions anywhere in sight?
On Thu, Apr 11, 2013 at 01:53:49PM -0700, Ask Bjørn Hansen wrote: That being said there are lots of options that might be good enough: - PowerDNS has a Geo backend - http://doc.powerdns.com/html/geo.html - There are various patches for Bind - Gdnsd - https://github.com/blblack/gdnsd - GeoDNS - https://github.com/abh/geodns I use the latter for the www.pool.ntp.org service where it sends users to one of about 4000 local servers (pops) in about 100 countries about 15 billion times a month. I haven't done it yet but gdnsd appeared to be the one to use when I tested some stuff out. The idea was to deligate a geo.domainname.com zone to gdnsd and have it perform the GEO DNS lookups. The PowerDNS one, while testing it, gave me problems trying to figure out how to get the geographical data since the readme I was using was out of date and a lot of the information lead to non-existent links etc.
Re: Noction?
If you run a multi-homed network calling them back can't hurt. Apparently they provide route optimization like Internap but is available for smaller networks. On Wed, Apr 10, 2013 at 02:30:52PM -0700, Ray Wong wrote: gotten a few cold calls from Noction. All I see is some PR about BGP happiness and good feelings with no technical hints about what they actually have to offer. They haven't even hit me directly, rather seem to be chasing us down via corporate listings, so are giving me not-confident feelings I should even return a call to them. Anyone know anything about them? -R
Anyone know of a good InfiniBand vendor in the US?
Hello NANOG, We are thinking of utilizing some InfiniBand stuff for some specific application in our data centres. We are new to InfiniBand however so we want to get some equipment and see if it does what we need. Does anyone know of a good vendor in the US? East or West coast, doesn't matter. If anyone has any good advice or information about InfiniBand that would be nice to hear too as we are totally new to it at present. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Anyone know of a good InfiniBand vendor in the US?
Oh by vendor I mean VAR I guess. Mostly I'm also wondering how an IB network handles IPoIB and how one uses IB with a gateway to layer 3 Ethernet switches or edge routers. If anyone has any resources that provide details on how this works and how ethernet VLANs are handled I'd appreciate it. On 19 February 2013 14:37, Matt Addison matt.addi...@lists.evilgeni.uswrote: VAR or Manufacturer? Mellanox are essentially the defacto standard for IB switches and HCAs. Sent from my mobile device, so please excuse any horrible misspellings. On Feb 19, 2013, at 14:12, Landon Stewart lstew...@superb.net wrote: Hello NANOG, We are thinking of utilizing some InfiniBand stuff for some specific application in our data centres. We are new to InfiniBand however so we want to get some equipment and see if it does what we need. Does anyone know of a good vendor in the US? East or West coast, doesn't matter. If anyone has any good advice or information about InfiniBand that would be nice to hear too as we are totally new to it at present. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Has anyone had any response from Sourceforge lately? Looking for a contact who will reply.
Thanks guys for everyone who replied on and off list. I appreciate it immensely. On 13 December 2012 07:30, Joe Loiacono jloia...@csc.com wrote: I have had success in the recent past using their chat channel ... http://webchat.freenode.net/?randomnick=0channels=sourceforge Joe From: Seamus Ryan s.r...@uber.com.au To: 'NANOG list' nanog@nanog.org Date: 12/13/2012 04:28 AM Subject:RE: Has anyone had any response from Sourceforge lately? Looking for a contact who will reply. I have, However I was informed the operators were in the middle of a large project at present which means most things are being pushed to a side for several weeks. Regards, Seamus -Original Message- From: Landon Stewart [mailto:lstew...@superb.net] Sent: Thursday, 13 December 2012 10:37 AM To: NANOG list Subject: Has anyone had any response from Sourceforge lately? Looking for a contact who will reply. Hello, Has anyone had any response from Sourceforge lately? We are looking for a contact who will reply. The staff@ type email addresses appear to go into a blackhole or something. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Has anyone had any response from Sourceforge lately? Looking for a contact who will reply.
Hello, Has anyone had any response from Sourceforge lately? We are looking for a contact who will reply. The staff@ type email addresses appear to go into a blackhole or something. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: DNS hostnames with a duplicate CNAME and A record - which should be removed?
Thanks for all your replies. I'm going to have go through these records and resolve these issues by evaluating them one by one since there doesn't seem to be any quick and dirty rules to any of them. On 18 October 2012 08:49, jeff weisberg jaw+nano...@tcp4me.com wrote: On 17 Oct 2012, at 15:25, Landon Stewart wrote: The problem is that we have some zones that have records with the same hostname that have both a CNAME as well as an A record, MX record, SOA record and/or NS record. # dig @ns1.superb.net +nocmd superbcolo.biz mx +noques +answer ;; ANSWER SECTION: superbcolo.biz. 86400 IN MX 10 superbcolo.biz. superbcolo.biz. 86400 IN CNAME superbenterprise.net. Should the CNAME just get nuked in all of these cases? no. if you nuke them, you'll break something. you're going to need to go through them all one by one, figure out why the CNAME is there, what it is doing, and how to change it. for example, superbcolo.biz has an MX and CNAME. the CNAME points to superbenterprise.net, which has an A, and that A has a web server running. it may be wrong, but http://superbcolo.biz works. so in this case, you'd need to replace the CNAME with the A. otherwise, you're breaking someone's website. which might be bad. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
DNS hostnames with a duplicate CNAME and A record - which should be removed?
Hi Y'all Nanogites, We are changing over to PowerDNS from djbdns (tinydns) and I'm taking this opportunity to fix as much of our zone data as we can. Under tinydns things work fine despite these errors because tinydns lets you get away with stuff like this and still responds even though a zone might technically be broken because of it. The problem is that we have some zones that have records with the same hostname that have both a CNAME as well as an A record, MX record, SOA record and/or NS record. Is there an easy answer for what should be removed? I'm inclined to say that the CNAME should be removed in all these cases but I can't find any definitive information on this and after doing some tests it doesn't always seem straightforward. I've been reading various sites and information including RFC 1034 but it's difficult to decide what to do when it's already an issue. For example in RFC 1034 section 3.6.2 the use of CNAME's with NS and MX records is not permitted but other research shows this is widely used even though its technically invalid. IMHO it should have never happened in the first place (where an A record already exists a CNAME should not have been allowed to get added for example) but what can be done now that it's already an issue? In the case of the A,NS,MX,SOA and CNAME duplicates an example of how our old/current name server's responses are: (*note: not all of this is real data, customer zones have been obfuscated)* * * # dig @ns1.superb.net +nocmd mail.customerzone.com A +noques +answer ;; ANSWER SECTION: mail.customerzone.com. 14342 IN CNAME mail.superb.net. mail.customerzone.com. 86342 IN A xx.xx.246.9 # dig @ns1.superb.net +nocmd superbcolo.biz NS +noques +answer ;; ANSWER SECTION: superbcolo.biz. 86400 IN NS ns1.superb.net. superbcolo.biz. 86400 IN NS ns2.superb.net. superbcolo.biz. 86400 IN NS ns3.superb.net. superbcolo.biz. 86400 IN CNAME superbenterprise.net. # dig @ns1.superb.net +nocmd superbcolo.biz mx +noques +answer ;; ANSWER SECTION: superbcolo.biz. 86400 IN MX 10 superbcolo.biz. superbcolo.biz. 86400 IN CNAME superbenterprise.net. dig @ns1.superb.net +nocmd customerzone2.com SOA +noques +answer ;; ANSWER SECTION: customerzone2.com. 86400 IN CNAME superbenterprise.net. customerzone2.com. 86400 IN SOA ns1.superb.net. hostmaster.superb.net. 1350501302 0 0 0 0 Should the CNAME just get nuked in all of these cases? -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: guys != gender neutral
On 27 September 2012 11:34, Owen DeLong o...@delong.com wrote:
When did people stop being an acceptable gender-neutral substitute for
{guys,gals}?
Owen
Using the word 'people' is good but I like to say 'humans'.
What's up humans?
Can I get you humans to drink?
This rarely offends anyone.
--
Landon Stewart lstew...@superb.net
Sr. Administrator
Systems Engineering
Superb Internet Corp - 888-354-6128 x 4199
Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: guys != gender neutral
On 27 September 2012 16:08, Scott Howard sc...@doc.net.au wrote: The Oxford English dictionary apparently disagrees with you. http://oxforddictionaries.com/definition/american_english/guy?region=usq=guys (*guys*) people of either sex: * you guys want some coffee? * As other many words in the English language there are multiple definitions, and one of those definitions is gender specific - but the one above is very much gender neutral (either sex - it doesn't get much clearer than that!) Well played Scott, well played. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: HXXP browser protocol
On 13 September 2012 09:38, Sean Harlow s...@seanharlow.info wrote: Using hxxp is a common method to prevent auto-linking by various email/IM clients and/or forum software to then require the user to actively copy/paste the URL to get the content. In the case of a security alert, I could see it being used if the destination is in fact an example of an attack site to prevent someone from inadvertently clicking the link and getting infected. All true and commonly used but it's worth mentioning that putting a space before the *dot TLD* is a better way to prevent auto linking in email/IM clients since most of them detect the formation URLs by other means rather than rely on the exitence of http://. -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: DNS poisoning at Google?
Is it possible that some malicious software is listening and injecting a redirect on the wire? We've seen this before with a Windows machine being infected. On 26 June 2012 20:53, Matthew Black matthew.bl...@csulb.edu wrote: Google Safe Browsing and Firefox have marked our website as containing malware. They claim our home page returns no results, but redirects users to another compromised website couchtarts.com. We have thoroughly examined our root .htaccess and httpd.conf files and are not redirecting to the problem target site. No recent changes either. We ran some NSLOOKUPs against various public DNS servers and intermittently get results that are NOT our servers. We believe the DNS servers used by Google's crawler have been poisoned. Can anyone shed some light on this? matthew black information technology services california state university, long beach www.csulb.eduhttp://www.csulb.edu -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: DNS poisoning at Google?
There is definitely a 301 redirect. $ curl -I --referer http://www.google.com/ http://www.csulb.edu/ HTTP/1.1 301 Moved Permanently Date: Wed, 27 Jun 2012 05:36:31 GMT Server: Apache/2.0.63 Location: http://www.couchtarts.com/media.php Connection: close Content-Type: text/html; charset=iso-8859-1 On 26 June 2012 22:05, Matthew Black matthew.bl...@csulb.edu wrote: Google Webtools reports a problem with our HOMEPAGE /. That page is not redirecting anywhere. They also report problems with some 48 other primary sites, none of which redirect to the offending couchtarts. matthew black information technology services california state university, long beach -Original Message- From: Jeremy Hanmer [mailto:jeremy.han...@dreamhost.com] Sent: Tuesday, June 26, 2012 9:58 PM To: Matthew Black Cc: nanog@nanog.org Subject: Re: DNS poisoning at Google? It's not DNS. If you're sure there's no htaccess files in place, check your content (even that stored in a database) for anything that might be altering data based on referrer. This simple test shows what I mean: Airy:~ user$ curl -e 'http://google.com' csulb.edu !DOCTYPE HTML PUBLIC -//IETF//DTD HTML 2.0//EN htmlhead title301 Moved Permanently/title /headbody h1Moved Permanently/h1 pThe document has moved a href=http://www.couchtarts.com/media.php here/a./p /body/html Running curl without the -e argument gives the proper site contents. On Jun 26, 2012, at 9:24 PM, Matthew Black matthew.bl...@csulb.edu wrote: Running Apache on three Solaris webservers behind a load balancer. No MS Windows! Not sure how malicious software could get between our load balancer and Unix servers. Thanks for the tip! matthew black information technology services california state university, long beach From: Landon Stewart [mailto:lstew...@superb.net] Sent: Tuesday, June 26, 2012 9:07 PM To: Matthew Black Cc: nanog@nanog.org Subject: Re: DNS poisoning at Google? Is it possible that some malicious software is listening and injecting a redirect on the wire? We've seen this before with a Windows machine being infected. On 26 June 2012 20:53, Matthew Black matthew.bl...@csulb.edumailto: matthew.bl...@csulb.edu wrote: Google Safe Browsing and Firefox have marked our website as containing malware. They claim our home page returns no results, but redirects users to another compromised website couchtarts.comhttp://couchtarts.com. We have thoroughly examined our root .htaccess and httpd.conf files and are not redirecting to the problem target site. No recent changes either. We ran some NSLOOKUPs against various public DNS servers and intermittently get results that are NOT our servers. We believe the DNS servers used by Google's crawler have been poisoned. Can anyone shed some light on this? matthew black information technology services california state university, long beach www.csulb.eduhttp://www.csulb.eduhttp://www.csulb.edu -- Landon Stewart lstew...@superb.netmailto:lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.nethttp://www.superbhosting.net/ -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Anyone have a layman's guide to writing an rwhois daemon?
Hey Tim, thanks a lot. This did help. I saw how you dealt with some queries and stuff. Thanks again! On 7 May 2012 16:44, Tim Jackson jackson@gmail.com wrote: Dunno how much help it'll be but here's mine.. It's basic and probably non-RFC compliant, but it might help. crapbox.idge.net/~tjackson/rwhois.tar.gz On May 7, 2012 6:35 PM, Landon Stewart lstew...@superb.net wrote: Hi All, I just wrote a perl daemon that seems to be a working rwhois server but the RFC is quite difficult to read for me. When talking about the protocol it mentions a bunch of requirements and describes them quite strangely (see rfc2167 section 3.1.9). Is there a layman's guide around somewhere or can anyone lend some advice here? Is what I wrote acting like a real rwhois server - at least partially? $ whois -h sirt.hopone.net -p rwhois 66.235.162.21 %rwhois V-1.5:00:00 rwhois.hopone.net (HopOne Internet Corp) servername:sls-cf7p17 domain:rac13a.com ipaddress:66.235.162.21 ipaddress:66.235.166.15 ipaddress:66.235.179.110 abusename:Abuse Department abusephone:206-438-5909 abusemail:ab...@hopone.net %ok (If you try running the command above it may or may not be running and may not succeed) If anyone knows where to get an rwhois daemon that has hooks for looking up the data in an external database (not a .cdb database or flat file) I'd appreciate it a great deal. I won't want to waste too much time on this if I can help it but I want a functioning rwhois server. Our rwhoisd at rwhois.hopone.net has been broken for a while and for the life of me I cannot figure out what's wrong with the data formatting it's using. I attempted to join the mailing list for ISC's rwhoisd daemon but it's dead (no volume on the list). -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Anyone have a layman's guide to writing an rwhois daemon?
Hi All, I just wrote a perl daemon that seems to be a working rwhois server but the RFC is quite difficult to read for me. When talking about the protocol it mentions a bunch of requirements and describes them quite strangely (see rfc2167 section 3.1.9). Is there a layman's guide around somewhere or can anyone lend some advice here? Is what I wrote acting like a real rwhois server - at least partially? $ whois -h sirt.hopone.net -p rwhois 66.235.162.21 %rwhois V-1.5:00:00 rwhois.hopone.net (HopOne Internet Corp) servername:sls-cf7p17 domain:rac13a.com ipaddress:66.235.162.21 ipaddress:66.235.166.15 ipaddress:66.235.179.110 abusename:Abuse Department abusephone:206-438-5909 abusemail:ab...@hopone.net %ok (If you try running the command above it may or may not be running and may not succeed) If anyone knows where to get an rwhois daemon that has hooks for looking up the data in an external database (not a .cdb database or flat file) I'd appreciate it a great deal. I won't want to waste too much time on this if I can help it but I want a functioning rwhois server. Our rwhoisd at rwhois.hopone.net has been broken for a while and for the life of me I cannot figure out what's wrong with the data formatting it's using. I attempted to join the mailing list for ISC's rwhoisd daemon but it's dead (no volume on the list). -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: SORBS?!
On 4 April 2012 12:53, Chris Conn cc...@b2b2c.ca wrote: Hello, Is anyone from SORBS still listening? We have a few IP addresses here and there that are listed, one in particular that has been for a spam incident from over a year ago. The last spam date is 03/05/2011 according to their lookup tools. We don't have access to their Net Manager even if our ARIN POC corresponds to the account on their system we opened a while ago. We use their ISP feedback form and never get any responses back. Is SORBS still relevant and functional? I've been trying to login to their 'support' interface for a while now. Emails from them for creating a new account or trying to recover a password for an existing account don't actually come to me. I actually wrote Girish from the company that purchased SORBS (Proofpoint) about it (also CC'd here) and I have had no reply whatsoever either. I think we should all just NULL ROUTE all of their IP space on our borders to get their attention. Regards, Landon
Re: SORBS?!
On 4 April 2012 14:21, Jeroen van Aart jer...@mompl.net wrote: Landon Stewart wrote: I think we should all just NULL ROUTE all of their IP space on our borders to get their attention. Yeah you're free to do that, as well as complain about it and SORBS in turn is free to put whatever the hell they feel like on their block lists and not remove it at all, ever, for whatever reason. The latter part of that sentence has already been confirmed for years now. It's best to not complain about it and just accept it as a fact of life your IPs are listed on SORBS and move on. It's not the end of the world. It turns into a customer service issue for most service providers.
Re: SORBS?!
On 4 April 2012 14:27, Alain Hebert aheb...@pubnix.net wrote: As for SORBS, they have a ticket system at http://support.sorbs.net/which use the same username/password as https://www.us.sorbs.net. You can follow up there with your ticket #, if their robot is being a bit too fascist. ( ecarbonel was the guy that help us in our case ) Yeah that's my main complaint right now is that we can't get into their ticket system *or* register a new account for our AS. The new account registration email never gets received for confirmation. The account we used to use doesn't work despite it being somewhere around 7 years old. PS: The ticketing system is not that fast, so be patient. It's better than it was a few months ago I must say. It was almost absolutely unusably slow the last time I was in there probably late last year some time. --- Landon Stewart lstew...@superb.net mailtolstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: www.superb.net
Re: uunet ends newsfeed/newsreader in US
On 31 Mar 2012 08:55:48 +0200, John R. Levine jo...@iecc.com wrote: Spam sucks, but I've been posting to usenet with my real unmunged email address since 1981 and my inbox remains entirely usable. The idea that the way to avoid spam is to hide from spammers is so 1990s. LOL yer not kidding. https://www.google.ca/search?sourceid=chromeie=UTF-8q=%22johnl%40iecc.com%22 -- About 60,800 results (0.27 seconds) -- Landon Stewart lstew...@superb.net Sr. Administrator Systems Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: www.superb.net pgpBnE2GAQeQM.pgp Description: PGP signature
Re: Looking for advice - Auditing zones on a set of name servers
..snip.. I need it to do since sometimes we are authoritative but there are no NS records or they are wrong. I'm also not sure beating on google's name servers is a good idea either so you should fill in your OWN recursive name servers instead f 8.8.8.8 and 8.8.4.4. don't you really want to walk the tree from . down? so dig +trace | machine-ify then make sure that the criteria you care about work out properly? (this avoides people's old/legacy/super-long-ttl causing problems in the shorter term) I've done it this way. Another person wrote me off list and said the same thing so I've modified things to do it this way and it looks good. Thanks for your reply!
Looking for advice - Auditing zones on a set of name servers
Hi Everyone,
I'm looking for some advice here. I'm attempting to clean up a set of name
servers and have a list of domain names that should not actually be hosted
on those name servers. In some cases there are issues where there are
actually no NS records in a domain but it should be hosted on those name
servers. In some cases the name servers just aren't authoritative and the
domain should be removed. The name servers are all djbdns, not that it
matters a whole lot.
I'm wondering if anyone knows of some tools that I can use other than
homegrown ones that are a little more robust in terms of thinking of every
little possible issue for or against a domain than I can think of. Of a
list of domains that I marked for deletion some of them simply had little
problems but should not be deleted (rather just have their NS records
fixed). I also don't' want to pound on someone else's recursive name
servers or even the root name servers trying to audit ours since that's not
very nice. If anything I guess I could spread out the queries if I had the
right tools.
I wrote a quick script that looks up the NS records for a zone, then the A
records for those NS records and checks the resulting IP addresses against
a list of IP addresses that are our name servers. It's not quite doing all
I need it to do since sometimes we are authoritative but there are no NS
records or they are wrong. I'm also not sure beating on google's name
servers is a good idea either so you should fill in your OWN recursive name
servers instead f 8.8.8.8 and 8.8.4.4.
Thanks for reading! :-D
#!/usr/bin/perl
# No warranty or guarantee of fitness for any purpose or use. Do not use
# if you don't know what it does.
#
use strict;
use Net::Nslookup;
die (Usage: $0 zone list file\n) if !$ARGV[0];
# Array of the IP addresses of YOUR name servers
my @goodns = (
10.10.0.5,
10.10.1.5,
);
open(F,$ARGV[0]) or die(Cannot open file: $ARGV[0]\n);
my @zonelist = F;
close(F);
chomp(@zonelist);
#
# Cycle through each zone to find out if we are authoritative on one of the
IPs listed
# above in @goodns.
#
foreach my $zone (@zonelist) {
# Sub 8.8.8.8 and 8.8.4.4 for your own recursive name server IP addresses
to
# avoid being rude to google's name servers if you are doing a lot of
lookups.
#
# Find the NS records for the zone
my @pns = nslookup(domain = $zone, type = NS, server = [ '8.8.8.8',
'8.8.4.4'] );
# Cycle through each NS record and store an IP address for each
my @dns_a_records = ();
foreach my $ns (@pns) {
my $arr = nslookup(domain = $ns, type = A, server = [ '8.8.8.8',
'8.8.4.4'] );
push(@dns_a_records,$arr);
}
#
# If @dns_a_records contains stuff that's also in @goodns then it means
# we are probably authoritative in some way.
#
my %goodns=map{$_ =1} @goodns;
my %dns_a_records=map{$_=1} @dns_a_records;
my @isect = grep( $goodns{$_}, @dns_a_records );
if (!@isect) {
@dns_a_records[0] = NONE if (!@dns_a_records);
# We are not authoritative - print the zone and ns record information
with a -
print -:$zone: .join(,,@pns).\[.join(,, @dns_a_records).\]\n;
} else {
# We are authoritative print it with a +
print +:$zone: .join(,,@pns).\[.join(,, @dns_a_records).\]\n;
}
}
# END
---
Landon Stewart lstew...@superb.net mailtolstew...@superb.net
Sr. Administrator
Systems Engineering
Superb Internet Corp - 888-354-6128 x 4199
Web hosting and more Ahead of the Rest: www.superb.net
Re: Dear RIPE: Please don't encourage phishing
On 10 February 2012 16:09, Brandon Butterworth bran...@rd.bbc.co.uk wrote: So it's necessary to throw the baby out with the bathwater, and tell them never to click on a link... That baby was ugly anyway HAHAHA. My $0.02 on this issue is if the message is rich text I hover over the link and see where it actually sends me. If I don't know what that link is then I don't click it. Not sure how long it's going to take, probably a generation, for people to use some sense before mindlessly clicking on stuff. Banks and businesses that keep sensitive information in a protected area on the web for you should start sending messages in PLAIN TEXT so you have to copy/paste the link if you don't already have it book marked or don't want to type it. Sure it's not all flashy and there's no nice pictures and junk but if you get an email from your bank that's not in plain text and contains hyperlinks then you'll know it's fake before you even read it. --- Landon Stewart lstew...@superb.net mailtolstew...@superb.net Manager of Systems and Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: www.superb.net
Re: Hotmail.com/live.com email admin needed
Me too please, seriously. We have a blocked /24 but no information on why in SNDS. No response to our postmaster.live.com attempt either. Thank you. On 26 January 2012 13:28, Adam Hobach ahob...@cyberlynk.net wrote: I apologize but we are not getting anywhere regarding spam issues with Hotmail.com/live.com through the normal support channels. Can someone from hotmail please contact me off-list? Let me know... Thanks, Adam Adam Hobach CyberLynk Sales/Support - 414-858-9335 supp...@cyberlynk.net or sa...@cyberlynk.net http://www.CyberLynk.net https://secure.CyberLynk.net -- Landon Stewart lstew...@superb.net Manager of Systems and Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Speed Test Results
Just a note on this subject although not directly related to the original question - There some interesting tests available here: http://www.measurementlab.net/ -- Landon Stewart lstew...@superb.net Manager of Systems and Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: On Working Remotely
This thread reminded me of a The Oatmeal comic I saw not too long ago. This explains the *good* and *horrible* about working from home. http://theoatmeal.com/comics/working_home -- Landon Stewart lstew...@superb.net Manager of Systems and Engineering Superb Internet Corp - 888-354-6128 x 4199 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Logs Bank
On 8 November 2011 11:59, joshua.kl...@gmail.com wrote: Hi, If I may ask, is there any OSS that can serve as a log bank or log server, where it aggregate logs from different sources , and the logs can be accessed using the web from any location on the network and can do graphical presentations based on.the frequency or content os the logs. Do you mean like Splunk? http://www.splunk.com -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Is yahoo seriously blocking emails with variants of the words occupywallstreet?
Hi Guys, Is yahoo seriously blocking emails with variants of the words occupywallstreet? -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
SourceForge / geek.net contact please
Hello Nanog, I wrote sfnet_...@geek.net but have had no response in over 24 hours. Wondering if someone from SF can contact me off list please. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: kernel.org dns broken
On 8 September 2011 15:44, Atticus grobe...@gmail.com wrote: I can't resolve anything for kernel.org from Verizon's 3G network, or from HE in California. I'm using HE's nameservers, with Google's as a backup. Neither of them have any records. Anyone know what's up? I'm seeing the same issue. One of the authoritative name servers is timing out and the other is not providing an authoritative record. *# dig kernel.org @130.239.17.16 * ; DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 kernel.org @130.239.17.16 ;; global options: printcmd ;; connection timed out; no servers could be reached *# dig kernel.org @209.132.180.67* ; DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 kernel.org @209.132.180.67 ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 1319 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;kernel.org.IN A -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Telus contact please
If anyone from Telus is on IPE please contact me off list. This is regarding an email from @superb.net sent to your ab...@telus.net address at 17:19 PDT today. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: What do you do when your Home ISP is down?
On 18 August 2011 10:21, Mark Keymer m...@viviotech.net wrote: I myself have a cable provider at home that I use. And I find it quite frustrating to call and report issues in there network, because the people in the call center have you do the same things every time and are not very technical. I live in a fairly rural town of about 5000. I have pretty good cable Internet but I also subscribe to my telco provider's ADSL as a 'backup' connection if my cable Internet goes down. It's an expensive solution but unfortunately necessary since I work full time from my home office. I am also frustrated by the 20 minute telephone call by local ISP support while they go through their flow chart of possible issues before they can dispatch someone to fix the problem but I understand the need for diligence before bothering a higher tier of support or the engineering people. Now if only I could find a provider who offered some real connectivity in this area. My local telco wants big bucks for a monitored DSL circuit and the DSL in this area sucks really bad because I'm pretty far from the C/O; hence why I use my cable Internet the most and DSL is just a backup. My cable Internet provider offers no such business services in this area to 'a residential address'. Pff. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: v4/v6 dns thoughts?
On 9 August 2011 16:36, Owen DeLong o...@delong.com wrote: My PTRs are all to the same host name. In any context where the protocol actually matters, you should have other ways to detect it. I also don't recommend doing the foo.v4/foo.v6 thing in your forwards. There's really no advantage to do it. Most tools either have separate IPv4/IPv6 variants or have command-line switches for address-family control if you care. I agree that using the v4 or v6 tag in forward or reverse is pointless. One can tell it is v4 or v6 by the result of the lookup and the hostnames don't change just because they are accessible via IPv6. If a hostname is directly related to the fact that its IPv6 by all means put it in there though. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: [BULK] Re: SORBS contact
On 28 July 2011 14:16, Brian R. Watters brwatt...@absfoc.com wrote: Thanks .. their attempts to reach us are blocked via our Barrcacuda's due to the fact that they are sending with a blank FROM: and as such Barracuda thinks its SPAM .. just to darn funny .. I have whitelisted their domain so on my fourth attempt we will see .. Cant create tickets or communicate with them unless you have an account and you can not get an active account unless you can get an email to activate it .. very frustrating to say the least. In Soviet Russia - Network block SORBS! - Yakov Smirnoff Ok, he didn't really say that one. Seriously though, in the past I've found their website so slow and generally parts were broken I couldn't use it. I tried to email webmaster@ and some other addresses about issues with the site but my emails were all blocked for whatever reason I can't recall. I probably spelled my own name wrong or something in my signature and it was detected and summarily blocked. Maybe its better now though, I'm not sure. We haven't had much need for it lately knocks on wood. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Yup; the Internet is screwed up.
On Wed, Jun 22, 2011 at 12:48 PM, Jeroen van Aart jer...@mompl.net wrote: If you have a 100 mbps broadband connection and your toddlers are slowing down your video conference call with your boss by watching the newest Dexter (hah!). Then your *need* can be easily satisfied by telling your toddlers to cut the crap for a while. Sure it'd be nice if your toddlers could watch Dexter kill another victim whilst you were having a smooth video conference talk with your boss, but it's not necessary. +1 best comment I've read all day :-D -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Eircom Networks (of Ireland) contact me off list please
EHLO Folks, Can someone from Eircom please contact me? -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: IPv6 day fun is beginning!
I'll be watching this page probably. http://www.worldipv6day.org/participants/
Re: Had an idea - looking for a math buff to tell me if it's possible with today's technology.
On Thu, May 19, 2011 at 5:05 AM, Vitkovsky, Adam avitkov...@emea.att.comwrote: inverse problem This is what I believe Landon meant in his original post Everybody started talking about compression -but that is I believe sending the result of the function -where both nodes know the function But how hard if at all possible is to figure out a function(or set of functions) and variables that describe the given data And than just send those functions and variables to the other node And let it to recompute the original file Complex function can be represented by simple numbers to shrink down the amount of data to be sent over the wire If the file is: 1048576 -than that coule be represneted via: 1*1 X=2 Y=10 Where both nodes would know that 1 = x^y Just wanted to say yes, this is entirely what I meant. Of course the smaller the file the more pointless it gets but still... If the file was 1GB instead of just 7 bytes I'm wondering if a regular old workstation could put it back together in any reasonable amount of time with the equation. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Netflix Is Eating Up More Of North America's Bandwidth Than Any Other Company
On Wed, May 18, 2011 at 12:46 PM, Michael Holstein michael.holst...@csuohio.edu wrote: http://e.businessinsider.com/public/184962 Somebody should invent a a way to stream groups of shows simultaneously and just arrange for people to watch the desired stream at a particular time. Heck, maybe even do it wireless. problem solved, right? There was a lengthy discussion about that on NANOG a week or so ago. I don't claim to understand all facets of multicast but it could be a sort of way to operate tv station type scheduled programming for streaming media. There's no way to pause, rewind or otherwise seek multicasted media though. It would be going backwards in terms of what consumers want these days. http://en.wikipedia.org/wiki/Multicast http://en.wikipedia.org/wiki/Mbone It seems to me that every provider these days is using a year 2K business model with 2011 bandwidth requirements and then complaining that consumers are transferring too much data. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Had an idea - looking for a math buff to tell me if it's possible with today's technology.
Lets say you had a file that was 1,000,000,000 characters consisting of 8,000,000,000bits. What if instead of transferring that file through the interwebs you transmitted a mathematical equation to tell a computer on the other end how to *construct* that file. First you'd feed the file into a cruncher of some type to reduce the pattern of 8,000,000,000 bits into an equation somehow. Sure this would take time, I realize that. The equation would then be transmitted to the other computer where it would use its mad-math-skillz to *figure out the answer* which would theoretically be the same pattern of bits. Thus the same file would emerge on the other end. The real question here is how long would it take for a regular computer to do this kind of math? Just a weird idea I had. If it's a good idea then please consider this intellectual property. LOL -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Re: Had an idea - looking for a math buff to tell me if it's possiblewith today's technology.
On Wed, May 18, 2011 at 1:44 PM, George Bonser gbon...@seven.com wrote: Congratulations. You have just invented compression. Woot. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Rwhois not serving all records - it is almost working though.
Hello NANOG, I sent this information to the rwhoisd mailing list originally but I've been informed that the mailing list is mostly dead now. I hope this is not too far off-topic for NANOG. One person replied to me off-list from the rwhois mailing list and had some help but I haven't found a solution yet. Scrapping our entire rwhois implementation and starting from scratch would be a shame since I don't have that many free cycles these days. If anyone has any info or can offer some information/help that'd be super duper appreciated. Someone else installed this copy of rwhoisd and then that service was moved to a new server. The rwhois server we maintain is rwhois.hopone.net on port 4321. All of this used to work until the rwhois service and its directories were moved to a new server a few months ago. It hasn't worked quite right since then. I'm really not sure how it all works - I'm jumping into the middle of this since the person who set it up isn't around any more. I've checked for things as simple as permissions and file formatting but I can't find any problems. Anyway - The data files are exported from our customer database and look OK. By OK I mean they are getting exported, I'm not sure if there's a formatting issue or not. The files are generated regularly on another server that hasn't had any changes made to it so they should, in theory, be fine. For this example I'll use 66.36.235.19 as the IP address in question. This is our address. When doing a lookup I see the following which is incomplete. Actually I'd like it to not display this at all personally. I'd like the customer information to be displayed instead but multiple records is fine (ours for the netblock and theirs for their allocation). See below for more information about the data files. # whois 66.36.235.19 [Querying whois.arin.net] [Redirected to rwhois.hopone.net:4321] [Querying rwhois.hopone.net] [rwhois.hopone.net] %rwhois V-1.5:003fff:00 rwhois.hopone.net (by Network Solutions, Inc. V-1.5.9.5) network:Class-Name:network network:ID:66.36.224.0/19 network:Auth-Area:66.36.224.0/19 network:Network-Name:Superb Internet Corporation network:IP-Network:66.36.224.0/19 network:Organization;I:Superb_Internet_Corporation network:Tech-Contact:hostmas...@superb.net network:Admin-Contact:hostmas...@superb.net network:Created:20050124 network:IP-Total:8192 network:IP-Used:3578 network:IP-Available:4614 network:IP-Usage:43.68 network:Updated:20110317 network:Updated-By:rwh...@hopone.com %referral rwhois://root.rwhois.net:4321/auth-area=. %ok The data files for this 66.36.231.147 are in a directory called /usr/local/rwhoisd/net-66.36.224.0-19. The directory looks like this: # pwd /usr/local/rwhoisd/net-66.36.224.0-19 # ls -la total 40 drwxr-xr-x 3 wwwwheel 4096 Mar 17 00:03 . drwxr-xr-x 26 rwhois rwhois 4096 Mar 17 00:03 .. drwxr-xr-x 3 wwwwheel 4096 Mar 17 00:05 data -rw-r--r-- 1 wwwwheel 125 Mar 17 00:03 schema -rw-r--r-- 1 wwwwheel 181 Mar 17 00:03 soa When changing into /usr/local/rwhoisd/net-66.36.224.0-19/data/network I see the data file that contains the information that should be served which is: # cat 1230-bakertrg.txt ID: 1230.66.36.224.0/19 Auth-Area: 66.36.224.0/19 Network-Name: bakertrg Network-Block: 66.36.235.19-66.36.235.19 Organization: Baker_TRG__Inc. IP-Used: 1 Created: 20050124 Updated: 20110317 Updated-By: rwh...@hopone.net The local.db file at /usr/local/rwhoisd/net-66.36.224.0-19/data/network/local.db contains the following for this which I assume is correct type:DATA file:net-66.36.224.0-19/data/network/1230-bakertrg.txt file_no:0 size:220 num_recs:1 lock:OFF Does anyone on this list have any idea why this data is not being served as expected through rwhois anymore? Some ideas on what to check would be helpful. I'd like to avoid resetting this up from scratch if there's an easy fix somewhere since it seems like its *almost* working. Thanks for taking the time to read this. I appreciate any help anyone can suggest on or off list. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
Looking for contact from either ATT.net (@txt.att.net) or T-Mobile (@tmomail.net)
Hi Folks, I'm seeing TXT messages leaving our network to @txt.att.net and @tmomail.netusers. The messages look very spammy. I'm wondering if there have been any complaints of TXT spam from the IP address 66.36.240.39 (messages are From: davidba...@tmsg4.com). I have examples if you are interested in seeing them. Please contact me off-list. -- Landon Stewart lstew...@superb.net SuperbHosting.Net by Superb Internet Corp. Toll Free (US/Canada): 888-354-6128 x 4199 Direct: 206-438-5879 Web hosting and more Ahead of the Rest: http://www.superbhosting.net
