Re: DMCA and NAT

[Brian Helman <bhelman () SALEMSTATE EDU>]

We are not blocking P2P, but I am throttling it way back.  I used to get ~2 notices a day from the RIAA/MPAA, but those 
stopped about 6-7 months ago.  I don't think it's because of my rate-shaping though.  Maybe I'm just doing a better job 
sending their emails to the junk folder?

I have told my ISP and the RIAA and the MPAA that, if they give me more information (e.g the address of the system that 
located the offending computer on-campus), that I will gladly track down the offender and shut them down .. (insert 
cricket noise here).  I don't have the manpower to pour through logs.

Having said that, we are going to implement a 1:1 NAT pool in the next few weeks.  I'll then know who had a specific 
public address at any given time.

-Brian

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Daniel 
Bennett
Sent: Tuesday, November 29, 2011 11:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] DMCA and NAT

We had a very large number of DMCA/RIAA notices a few years back at the end of a Spring semester.  The decision was 
made to make a best effort attempt to block P2P traffic and we have gone years without a DMCA notice from the RIAA.  We 
decided that the abuse of P2P traffic at our university far out weighed the good uses.


________________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Bulanda, Dave G 
[DGBulanda () INDIANATECH EDU]
Sent: Tuesday, November 29, 2011 11:43 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] DMCA and NAT

Kevin,

The way that I handle the DMCA and NAT issue is that I run syslog of my border firewall in a somewhat "INSANE" level.

Match Outside address to inside address - Take the inside address and match via NAC system and DHCP logs to client 
machine.

Then I send notice to student/StudentLife Office and suspend network access.

Dave

David Bulanda
Network Services Manager
dgbulanda () indianatech edu
Indiana Tech



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kevin 
Halgren
Sent: Tuesday, November 29, 2011 10:43 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] DMCA and NAT

Looking at the current discussion on DMCA notices, I was wondering how those of you using NAT handle associating a DMCA 
notice with a particular client system.  This continues to be a challenge for us.

Kevin