+1 on only IP's on the list where our resolver dns servers for customers. Carlos Alcantar Race Communications / Race Team Member 101 Haskins Way, So. San Francisco, CA. 94080 Phone: +1 415 376 3314 / car...@race.com / http://www.race.com
-----Original Message----- From: Matthew Crocker <matt...@corp.crocker.com> Date: Mon, 30 Jan 2012 10:56:10 -0500 To: Jack Bates <jba...@brightok.net> Cc: "nanog@nanog.org" <nanog@nanog.org> Subject: Re: US DOJ victim letter ----- Original Message ----- > From: "Jack Bates" <jba...@brightok.net> > To: "Jon Lewis" <jle...@lewis.org> > Cc: nanog@nanog.org > Sent: Monday, January 30, 2012 10:54:02 AM > Subject: Re: US DOJ victim letter > > On 1/27/2012 2:23 PM, Jon Lewis wrote: > > > > It's definitely real, but seems like they're handling it as > > incompetently as possible. We got numerous copies to the same email > > address, the logins didn't work initially. The phone numbers given > > are > > of questionable utility. Virtually no useful information was > > provided. > > My attitude at this point is, ignore it until they provide some > > useful > > information. > > > > We finally got the hard copy. No customer IP listed, just our > recursive > resolvers, both for the customers as well as the ones that handle the > MX > servers. > > All that waiting and work for apparently nothing. I'm going to guess > that my bind servers aren't malware infected (outside of being bind > j/king). > Same here, The hard copy came the other day with the access codes to download the IP list. Every IP on the list was for a resolving DNS server on our IP space. Total waste of time.
