Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NANOG: users
Abuse procedures... Reality Checks
 

Index | Next | Previous | View Flat


sil at infiltrated

Apr 7, 2007, 12:08 PM


Views: 3471
Permalink
Abuse procedures... Reality Checks

On Sat, 07 Apr 2007, Frank Bulk wrote:

>
> While you have your friend's ear, ask him why they maintain a spam policy of
> blocking complete /24's when:
> a) the space has been divided into multiple sub-blocks and assigned to
> different companies, all well-documented and queryable in ARIN
> b) there have been repeated pleas to whitelist a certain IP in separate
> sub-block that is only being punished for the behavior of others in a
> different sub-block.
>
> Frank

<realitycheck>

You're complaining of blocked /24's. I block off up to /6's from reaching
certain ports on my networks. Sound crazy? How many times should I contact
the netblock owner and here the same generic "well you have to open up a
complaint with our abuse desk... golly gee Joseph." Only to have the same
repeat attacks over and over and over. Sure, I'll start out blocking the
offensive address, then shoot off an email here and there, even post to
this or another list or search Jared's list for a contact and ask them
politely "Hey... I see X amount of attackers hitting me from your net"
But how long should I go on for before I could just say "to hell with
your users and network... They just won't connect." It's my own right to
when it comes to my network.

People complain? Sure, then I explain why, point out the fact that I
HAVE made attempts at resolutions to no avail. So should the entire
network be punished... No, but the engineers who now have to answer
THEIR clients on why they've been blacklisted surely are punished aren't
they. Now they have to hear X amount of clients moan about not being
able to send either a client, vendor or relative email. They have to
either find an alternative method to connect, or complain to their
provider about connectivity issues.

Is it fair? Yes it's fair to me, my clients, networks, etc., that
I protect it. Is it fair to complain to deaf ears when those deaf
ears are the ones actually clueful enough to fix? On a daily basis
I have clients who should be calling customer service for issues
contact me directly. Know what I do? ... My best to fix it, enter
a ticket number on the issue and go about the day. One way or the
other I'm going to see the ticket/problem so will it kill me to
take a moment or two to fix something? Sure I will bitch moan and
yell about it, a minute later AFTER THE FIX since things of this
nature usually don't take that much time, guess what? Life returns
to normal.

http://www.infiltrated.net/bforcers/5thWeek-Organizations

Have a look will you? These are constant offending networks with
hosts that are repeatedly ssh'ing into servers I maintain. Is it
unfair to block off their entire netblock from connecting via
ssh to my servers. Hell no it isn't. If I have clients on this
netblock, in all honesty tough. Let them contact their providers
after I tell them their provider has been blocked because of the
garbage on their network. Let their provider do something before
I do because heaven knows how many times have I tried reaching
someone diplomatically before I went ahead and blocked their
entire /6 /7 /8 /9 /10 and so on from connecting to me via ssh
or whatever other service they've intruded or attempted to
intrude upon.

Blocks? They usually last for 2 weeks then I take them off and
start ALL over again. Of course I've automated this so its no
sweat off shoulders. So you tell me in all honesty why someone
should not escalate and block off entire blocks.

</realitycheck>

--
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
echo @infiltrated|sed 's/^/sil/g;s/$/.net/g'
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743

"How a man plays the game shows something of his
character - how he loses shows all" - Mr. Luckey

Subject User Time
Abuse procedures... Reality Checks sil at infiltrated Apr 7, 2007, 12:08 PM
    RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 12:31 PM
    Re: Abuse procedures... Reality Checks sil at infiltrated Apr 7, 2007, 12:43 PM
        Re: Abuse procedures... Reality Checks peter at peter-dambier Apr 7, 2007, 2:04 PM
    Re: Abuse procedures... Reality Checks rsk at gsp Apr 7, 2007, 1:32 PM
    RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 2:20 PM
    Re: Abuse procedures... Reality Checks owenc at hubris Apr 7, 2007, 2:35 PM
    Re: Abuse procedures... Reality Checks fergdawg at netzero Apr 7, 2007, 2:50 PM
        Re: Abuse procedures... Reality Checks william at elan Apr 7, 2007, 3:57 PM
            RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 3:12 PM
        RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 9, 2007, 1:39 PM
        Re: Abuse procedures... Reality Checks rsk at gsp Apr 10, 2007, 5:09 AM
    Re: Abuse procedures... Reality Checks fergdawg at netzero Apr 7, 2007, 3:32 PM
    Re: Abuse procedures... Reality Checks list at satchell Apr 7, 2007, 3:44 PM
        RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 5:36 PM
        Re: Abuse procedures... Reality Checks vixie at vix Apr 8, 2007, 8:22 AM
    Re: Abuse procedures... Reality Checks fergdawg at netzero Apr 7, 2007, 4:00 PM
    RE: Abuse procedures... Reality Checks william at elan Apr 7, 2007, 4:20 PM
        RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 5:38 PM
    Re: Abuse procedures... Reality Checks owenc at hubris Apr 7, 2007, 4:30 PM
    Re: Abuse procedures... Reality Checks fergdawg at netzero Apr 7, 2007, 4:41 PM
    Re: Abuse procedures... Reality Checks owenc at hubris Apr 7, 2007, 4:45 PM
        Re: Abuse procedures... Reality Checks swmike at swm Apr 7, 2007, 10:44 PM
    RE: Abuse procedures... Reality Checks bonomi at mail Apr 7, 2007, 6:20 PM
        Re: Abuse procedures... Reality Checks dave.nanog at alfordmedia Apr 7, 2007, 6:04 PM
        RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 6:20 PM
        Re: Abuse procedures... Reality Checks johnl at iecc Apr 7, 2007, 8:27 PM
            Re: Abuse procedures... Reality Checks leo.vegoda at icann Apr 8, 2007, 12:48 PM
            Re: Abuse procedures... Reality Checks dotis at mail-abuse Apr 8, 2007, 8:10 PM
                Re: Abuse procedures... Reality Checks vixie at vix Apr 8, 2007, 9:03 PM
                    Re: Abuse procedures... Reality Checks dotis at mail-abuse Apr 9, 2007, 3:04 PM
                    Re: Abuse procedures... Reality Checks chris at westnet Apr 9, 2007, 4:49 PM
                Re: Abuse procedures... Reality Checks fw at deneb Apr 9, 2007, 7:34 AM
                    Re: Abuse procedures... Reality Checks joelja at bogus Apr 9, 2007, 8:30 AM
                    Re: Abuse procedures... Reality Checks johnl at iecc Apr 9, 2007, 8:48 AM
                        Re: Abuse procedures... Reality Checks petelists at templin Apr 9, 2007, 9:46 AM
                            Re: Abuse procedures... Reality Checks johnl at iecc Apr 9, 2007, 11:49 AM
                                Re: Abuse procedures... Reality Checks owenc at hubris Apr 9, 2007, 12:08 PM
                                    Re: Abuse procedures... Reality Checks petelists at templin Apr 9, 2007, 1:41 PM
                                        RE: Abuse procedures... Reality Checks frnkblk at iname Apr 9, 2007, 2:01 PM
                                        Re: Abuse procedures... Reality Checks owenc at hubris Apr 9, 2007, 2:37 PM
        Re: Abuse procedures... Reality Checks black at csulb Apr 7, 2007, 8:55 PM
        RE: Abuse procedures... Reality Checks bzs at world Apr 8, 2007, 4:11 PM
    Re: Abuse procedures... Reality Checks fergdawg at netzero Apr 7, 2007, 7:51 PM
        Re: Abuse procedures... Reality Checks owenc at hubris Apr 7, 2007, 7:56 PM
    Re: Abuse procedures... Reality Checks fergdawg at netzero Apr 7, 2007, 8:33 PM
    RE: Abuse procedures... Reality Checks frnkblk at iname Apr 7, 2007, 8:56 PM
    Re: Abuse procedures... Reality Checks sil at infiltrated Apr 9, 2007, 11:26 AM
    RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 9, 2007, 1:39 PM
    RE: Abuse procedures... Reality Checks frnkblk at iname Apr 9, 2007, 1:55 PM
    RE: Abuse procedures... Reality Checks christopher.morrow at verizonbusiness Apr 9, 2007, 1:58 PM
    RE: Abuse procedures... Reality Checks marla.azinger at frontiercorp Apr 9, 2007, 2:11 PM
    Re: Abuse procedures... Reality Checks Valdis.Kletnieks at vt Apr 9, 2007, 2:39 PM
    RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 10, 2007, 2:30 AM
    Re: Abuse procedures... Reality Checks rsk at gsp Apr 10, 2007, 5:26 AM
        RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 10, 2007, 7:11 AM
    RE: Abuse procedures... Reality Checks frnkblk at iname Apr 10, 2007, 5:44 AM
        Re: Abuse procedures... Reality Checks rsk at gsp Apr 11, 2007, 2:48 PM
    Re: Abuse procedures... Reality Checks jsdy at center Apr 10, 2007, 7:34 AM
    Re: Abuse procedures... Reality Checks jsdy at center Apr 10, 2007, 8:07 AM
    Re: Abuse procedures... Reality Checks list at satchell Apr 10, 2007, 5:34 PM
        Re: Abuse procedures... Reality Checks sil at infiltrated Apr 11, 2007, 4:07 AM
            RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 11, 2007, 5:27 AM
            Re: Abuse procedures... Reality Checks Valdis.Kletnieks at vt Apr 11, 2007, 8:21 AM
                Re: Abuse procedures... Reality Checks sil at infiltrated Apr 11, 2007, 8:28 AM
                    Re: Abuse procedures... Reality Checks warren at kumari Apr 11, 2007, 10:32 AM
                        Re: Abuse procedures... Reality Checks sil at infiltrated Apr 11, 2007, 10:49 AM
                            RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 11, 2007, 4:11 PM
                        Re: Abuse procedures... Reality Checks dotis at mail-abuse Apr 11, 2007, 2:02 PM
        RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 11, 2007, 5:20 AM
    Re: Abuse procedures... Reality Checks surfer at mauigateway Apr 11, 2007, 11:53 AM
        Re: Abuse procedures... Reality Checks warren at kumari Apr 11, 2007, 12:44 PM
            Re: Abuse procedures... Reality Checks rsk at gsp Apr 11, 2007, 2:55 PM
            RE: Abuse procedures... Reality Checks michael.dillon at bt Apr 11, 2007, 4:18 PM
    Re: Abuse procedures... Reality Checks surfer at mauigateway Apr 11, 2007, 4:46 PM
    RE: Abuse procedures... Reality Checks frnkblk at iname Apr 11, 2007, 6:50 PM
    RE: Abuse procedures... Reality Checks swmike at swm Apr 11, 2007, 11:26 PM
        Re: Abuse procedures... Reality Checks leigh.porter at ukbroadband Apr 12, 2007, 2:17 AM
    RE: Abuse procedures... Reality Checks fernando.andre at tvtel Apr 12, 2007, 3:14 AM
        Re: Abuse procedures... Reality Checks admin at digibase Apr 12, 2007, 10:55 AM
            Re: Abuse procedures... Reality Checks sil at infiltrated Apr 13, 2007, 4:15 AM
    Re: Abuse procedures... Reality Checks rsk at gsp Apr 13, 2007, 4:53 AM
        Re: Abuse procedures... Reality Checks sjsobol at JustThe Apr 13, 2007, 1:01 PM

  Index | Next | Previous | View Flat
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.