On Fri, Jul 29, 2011 at 2:46 AM, wrote:
> And you might want to fix it, since your users will never get a bounce notice
> from any RFC-compliant mailer - even if they *wanted* to know that their mail
> wasn't delivered. <> is the RFC-standard way to denote "this mail is a bounce
> report or othe
On Fri, 29 Jul 2011 09:48:44 EDT, William Herrin said:
> Correction: It's a standard way to denote that "this mail is a bounce
> report."
Correction to your correction: What the RFC actually says:
4.5.5. Messages with a Null Reverse-Path
There are several types of notification messages tha
Cnn works
Charter pings but is SLOW
yahoo works.
Tracing route to ipv6.cnn.com [2620:100:e000::8001] over a maximum of
30
hops:
1<1 ms<1 ms<1 ms 2001:550:2400::1
2<1 ms<1 ms<1 ms 2001:550:2:1c::1:2
357 ms57 ms56 ms 2001:470:1f00:16::1
my DNS servers were getting slow so I blocked recursive queries for
all but my own network.
Then I was getting so many of these:
ns2 named[5056]: client 78.159.111.190#25345: query (cache)
'isc.org/ANY/IN' denied
that is was still slowing things down. I've since written a script to
watch the lo
Ping me offline, there are a few other folks who have seen this as well. The
isc.org record is commonly used in reflection attacks because the size of the
record is so large, so the amplification factor is greatly increased. Can you
check to see if +edns=0 was set in the query? That would be
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.
The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG,
CaribNOG and the RIPE Routing Working Group.
Daily listings are sent to bgp-st...@lists.apnic.net
I see this all the time on my personal servers. I finally just told bind
to stop logging it.
On 07/29/2011 02:51 PM, Elliot Finley wrote:
my DNS servers were getting slow so I blocked recursive queries for
all but my own network.
Then I was getting so many of these:
ns2 named[5056]: client 78
We've been seeing this for several years on and off.
thanks,
-Drew
-Original Message-
From: Elliot Finley [mailto:efinley.li...@gmail.com]
Sent: Friday, July 29, 2011 2:51 PM
To: nanog@nanog.org
Subject: DNS DoS ???
my DNS servers were getting slow so I blocked recursive queries for
al
I've seen this for the same on about 3 sets of nameservers I operate. fail2ban
doing a 72 hour iptables drop rule.
-Original Message-
From: Drew Weaver [mailto:drew.wea...@thenap.com]
Sent: Friday, July 29, 2011 3:01 PM
To: 'Elliot Finley'; nanog@nanog.org
Subject: RE: DNS DoS ???
We'v
William Herrin wrote:
> On Fri, Jul 29, 2011 at 2:46 AM, wrote:
>
>> And you might want to fix it, since your users will never get a bounce notice
>> from any RFC-compliant mailer - even if they *wanted* to know that their mail
>> wasn't delivered. <> is the RFC-standard way to denote "this m
William Pitcock wrote:
> On Thu, 28 Jul 2011 12:31:13 -0700 (PDT)
> "Brian R. Watters" wrote:
>
>
>> We are looking for a SORBS contact as their web site and registration
>> process is less than friendly if somehow you get listed by them.
>>
>
> As I recall it, you can manually create an
BGP Update Report
Interval: 21-Jul-11 -to- 28-Jul-11 (7 days)
Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS
Rank ASNUpds % Upds/PfxAS-Name
1 - AS982929068 1.7% 34.0 -- BSNL-NIB National Internet
Backbone
2 - AS45899 2
This report has been generated at Fri Jul 29 21:12:25 2011 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org for a current version of this report.
Recent Table History
Date
On 29/07/2011 22:55, Michelle Sullivan wrote:
> Friendly or non friendly response is usually gaugable in advance by the
> tone of the initial email.
Which is usually gaugeable in advance by the tone of the customer
complaints that precipitated contact with SORBS in the first place.
Email is such
On Jul 30, 2011, at 1:51 AM, Elliot Finley wrote:
> my DNS servers were getting slow so I blocked recursive queries for all but
> my own network.
This should be the standard practice. By operating an open recursor, you lend
your DNS server to abuse as a contributor to DNS reflection/amplificat
On 07/29/2011 12:24 PM, Nick Hilliard wrote:
On 29/07/2011 22:55, Michelle Sullivan wrote:
Friendly or non friendly response is usually gaugable in advance by the
tone of the initial email.
Which is usually gaugeable in advance by the tone of the customer
complaints that precipitated contact wi
On 28 July 2011 14:16, Brian R. Watters wrote:
> Thanks .. their attempts to reach us are blocked via our Barrcacuda's due
> to the fact that they are sending with a blank FROM: and as such Barracuda
> thinks its SPAM .. just to darn funny .. I have whitelisted their domain so
> on my fourth atte
Hello,
Is there someone from cableone on this distro that can contact me off list,
re: network outages , in parts of NM ?
Nick Hilliard wrote:
Email is such a lousy medium for this. We're all much more decent people
in person than over snarky emails.
Speak for yourself!
Landon Stewart wrote:
> On 28 July 2011 14:16, Brian R. Watters wrote:
>
>
>> Thanks .. their attempts to reach us are blocked via our Barrcacuda's due
>> to the fact that they are sending with a blank FROM: and as such Barracuda
>> thinks its SPAM .. just to darn funny .. I have whitelisted th
On Sat, Jul 30, 2011 at 12:43 AM, Michelle Sullivan wrote:
> Emailing random non-existent email addresses (such as
> webmas...@sorbs.net) will earn you a listing...
webmaster@* isn't "random", it's a fairly standard way to reach the
administrator of a service. A failure to support that on your pa
21 matches
Mail list logo
