Re: RIAA Timestamps Off

["Scholz, Greg" <gscholz () KEENE EDU>]

With fear of pulling this conversation off topic, I was under the
impression that if you were NATing (unless you had a one for one for the
whole network) machines could not be publicly reachable servers.  If the
IP address to reach a specific machine is not specifically assigned how
does an Internet client reach them? 

Couple that with the wording on every DMCA notice I have seen "a
computer on your network is making infringing material available for
download" (not "has downloaded").

So how/why are you schools that are NATing getting these notices? I
completely understand that your students can continue to download but
how can they be the source?  Is it that they are "offering it to the
world" when they login to their P2P network but they never really are
reachable. That sounds more plausible.

And then I would have the concern that they can download to their hart's
content but can never be found which IMHO is not a good "educational"
perspective.

_________________________
Thank you,
Gregory R. Scholz
Director of Telecommunications
Information Technology Group
Keene State College
(603)358-2070
 
--Lead, follow, or get out of the way. 
(author unknown)
 
-----Original Message-----
From: Dennis Bohn [mailto:BOHN () ADELPHI EDU] 
Sent: Tuesday, October 02, 2007 7:56 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] RIAA Timestamps Off

We have many-to-one nats in our Resnet (vendor C would call this PAT.)
To ID the user we must verify each notice with our logs.  If there was
no flow matching the allegation in terms of time, source and destination
ip address and port, the case is unsubstantiated.  This has happened
less frequently in the past year than previously, but has still
happened.  Of course, if the complaint is substantiated, action is
taken.  

Best,
dennis


dennis bohn
network manager
5168773327
<message fabricated with 100% recycled electrons>