On Mon, 29 Jul 2002 13:20:52 -0700
Todd Lyons <[EMAIL PROTECTED]> wrote:

> James Sparenberg wrote on Mon, Jul 29, 2002 at 08:50:24PM -0700
> :> On the subject of Crackers.  Note this IP block owned by ATT 
> > 12.234.0.0/24  If been getting hit heavily from there by a
> > number
> 
> You're making the assumption that those boxes are actually owned
> by ATT. In reality it's probably a customer of ATT.  Or even
> worse, a customer or a customer of ATT.
> 
> Let me put it in another perspective.  ATT is selling to NSP
> which is selling a portion of that to ISP.  One of the customers
> of ISP is who actually owns the box.  That person is 3 layers
> removed from ATT.  So if you call ATT to tell them about it,
> they won't talk to you because YOU are not a customer and THEY
> are not a direct customer.  Best thing they'll do is block the
> /24 of that non-direct customer and that will only be if that
> non-direct customer's traffic is6 causing problems for their
> routers.  Second best thing that'll happen is that they'll
> actually tell NSP "get your customer to fix their crap".  Most
> likely is they'll tell you where to go (and it's hot there).
> 
> Blue skies...                 Todd


Actually in many ways I was hopping that the user agreement I had
shoved at me recently had some teeth.  One of the things that is
says you can get your service suspended for is having a box that
is "infected and or attempting to infect whether manually or on
it's on other boxes on the network" (paraphrased but the idea is
the same as the legalise.  The warning is place here because it is
such a large number of boxes that were hitting mine it wasn't
funny and once I block one box... another takes over.  It's moved
now from 12.234 to 12.253... *sigh*  Can't block 12... I'm on that
subnet....!!


James

> -- 
>   Todd Lyons -- MandrakeSoft, Inc.  
>   http://www.mandrakesoft.com/
> UNIX was not designed to stop you from doing stupid things,
> because   that would also stop you from doing clever things. --
> Doug Gwyn   Cooker Version mandrake-release-9.0-0.2mdk Kernel
> 2.4.18-21mdk
> 

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to