Re: Sites blocking ISP Addresses

2022-12-01 Thread Grant Taylor via NANOG

On 12/1/22 10:21 AM, Owen DeLong via NANOG wrote:
The WAF is under control of the site, but many sites blindly implement 
the recommendations of the WAF provider.


I have heard tell of a CDN / WAF that is generally held in good regard 
having a free tier that many people use that is much less flexible than 
the paid tiers.  As in things are enabled by default and you can't 
disable them.  --  I have no first hand experience with said CDN / WAF 
save as a consumer behind such CDN / WAF.




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature


Re: Sites blocking ISP Addresses

2022-12-01 Thread Mike Hammett
Pointing fingers is free. 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com 

- Original Message -

From: "Owen DeLong via NANOG"  
To: r...@rkhtech.org 
Cc: "James Dexter" , nanog@nanog.org 
Sent: Thursday, December 1, 2022 11:21:51 AM 
Subject: Re: Sites blocking ISP Addresses 

To make matters worse, many sites use CDNs with Web Application Firewalls. 


The WAF is under control of the site, but many sites blindly implement the 
recommendations of the WAF provider. 


So this allows the site to blame the CDN because they blindly implement their 
recommendations, while the CDN states that they cannot fix it because the WAF 
configuration is under the control of their customer. 


This was a persistent problem when I was at Akamai and has not been solved 
there yet to the best of my knowledge. Virtually every other CDN/WAF provider 
works the same way in my experience. 


Owen 






On Nov 30, 2022, at 10:28, Ryan Hamel  wrote: 



Based on experience, all I can say is good luck. They do not respond to anyone. 

Ryan 


From: NANOG  On Behalf Of James 
Dexter 
Sent: Tuesday, November 29, 2022 8:43 AM 
To: nanog@nanog.org 
Subject: Sites blocking ISP Addresses 





Dear list, 

We have address ranges that are being blocked by sites like Ticketmaster. 
Customer support is able to assist, and unable to receive a response from legal 
or hostmaster emails. What are the recommendations for requesting a removal 
from the blocked list at these sites? 





Re: Sites blocking ISP Addresses

2022-12-01 Thread Owen DeLong via NANOG
To make matters worse, many sites use CDNs with Web Application Firewalls.

The WAF is under control of the site, but many sites blindly implement the 
recommendations of the WAF provider.

So this allows the site to blame the CDN because they blindly implement their 
recommendations, while the CDN states that they cannot fix it because the WAF 
configuration is under the control of their customer.

This was a persistent problem when I was at Akamai and has not been solved 
there yet to the best of my knowledge. Virtually every other CDN/WAF provider 
works the same way in my experience.

Owen


> On Nov 30, 2022, at 10:28, Ryan Hamel  wrote:
> 
> Based on experience, all I can say is good luck. They do not respond to 
> anyone.
> 
> Ryan
>  
> From: NANOG  On Behalf Of James 
> Dexter
> Sent: Tuesday, November 29, 2022 8:43 AM
> To: nanog@nanog.org
> Subject: Sites blocking ISP Addresses
>  
> Dear list, 
> We have address ranges that are being blocked by sites like Ticketmaster. 
> Customer support is able to assist, and unable to receive a response from 
> legal or hostmaster emails. What are the recommendations for requesting a 
> removal from the blocked list at these sites? 



Re: Sites blocking ISP Addresses

2022-11-30 Thread J. Hellenthal via NANOG
Formal snail mail is your only option.

-- 
 J. Hellenthal

The fact that there's a highway to Hell but only a stairway to Heaven says a 
lot about anticipated traffic volume.

> On Nov 30, 2022, at 12:26, James Dexter  wrote:
> 
> 
> Dear list, 
> We have address ranges that are being blocked by sites like Ticketmaster. 
> Customer support is able to assist, and unable to receive a response from 
> legal or hostmaster emails. What are the recommendations for requesting a 
> removal from the blocked list at these sites? 
> 


Re: Sites blocking ISP Addresses

2022-11-30 Thread Mike Lyon
I’ve done the exact same thing for this same exact company (TicketMaster).

> On Nov 30, 2022, at 12:38, Van Dyk, Donovan via NANOG  wrote:
> 
> 
> Long long time ago, I had a similar issue that could not get resolved through 
> normal escalation means.  
>  
> I ended up going on linked in and grabbing every executive and senior email 
> contact I could find and notified them.
> Issue resolved in one day. Nothing gets a nocc moving fast like execs asking 
> about random network issues.
>  
> This company was nowhere near the size of Ticketmaster though.
>  
> Regards,
> --
>  
>  
> From: Ryan Hamel 
> Reply-To: "r...@rkhtech.org" 
> Date: Wednesday, November 30, 2022 at 11:29 AM
> To: 'James Dexter' , "nanog@nanog.org" 
> Subject: RE: Sites blocking ISP Addresses
>  
> Based on experience, all I can say is good luck. They do not respond to 
> anyone.
> 
> Ryan
>  
> From: NANOG  On Behalf Of James 
> Dexter
> Sent: Tuesday, November 29, 2022 8:43 AM
> To: nanog@nanog.org
> Subject: Sites blocking ISP Addresses
>  
> Dear list,
> We have address ranges that are being blocked by sites like Ticketmaster. 
> Customer support is able to assist, and unable to receive a response from 
> legal or hostmaster emails. What are the recommendations for requesting a 
> removal from the blocked list at these sites?
>  


Re: Sites blocking ISP Addresses

2022-11-30 Thread Van Dyk, Donovan via NANOG
Long long time ago, I had a similar issue that could not get resolved through 
normal escalation means.

I ended up going on linked in and grabbing every executive and senior email 
contact I could find and notified them.
Issue resolved in one day. Nothing gets a nocc moving fast like execs asking 
about random network issues.

This company was nowhere near the size of Ticketmaster though.

Regards,
--


From: Ryan Hamel 
Reply-To: "r...@rkhtech.org" 
Date: Wednesday, November 30, 2022 at 11:29 AM
To: 'James Dexter' , "nanog@nanog.org" 
Subject: RE: Sites blocking ISP Addresses

Based on experience, all I can say is good luck. They do not respond to anyone.

Ryan

From: NANOG  On Behalf Of James Dexter
Sent: Tuesday, November 29, 2022 8:43 AM
To: nanog@nanog.org
Subject: Sites blocking ISP Addresses

Dear list,
We have address ranges that are being blocked by sites like Ticketmaster. 
Customer support is able to assist, and unable to receive a response from legal 
or hostmaster emails. What are the recommendations for requesting a removal 
from the blocked list at these sites?



RE: Sites blocking ISP Addresses

2022-11-30 Thread Ryan Hamel
Based on experience, all I can say is good luck. They do not respond to anyone.

Ryan

 

From: NANOG  On Behalf Of James Dexter
Sent: Tuesday, November 29, 2022 8:43 AM
To: nanog@nanog.org
Subject: Sites blocking ISP Addresses

 

Dear list, 

We have address ranges that are being blocked by sites like Ticketmaster. 
Customer support is able to assist, and unable to receive a response from legal 
or hostmaster emails. What are the recommendations for requesting a removal 
from the blocked list at these sites? 

 



Sites blocking ISP Addresses

2022-11-30 Thread James Dexter
Dear list,
We have address ranges that are being blocked by sites like Ticketmaster.
Customer support is able to assist, and unable to receive a response from
legal or hostmaster emails. What are the recommendations for requesting a
removal from the blocked list at these sites?