Security Incidents mailing list archives

Re: How to cope with, uhm, "mentally challenged" abuse personnel?


From: Nicholas Bachmann <nabachmann () YAHOO COM>
Date: Tue, 6 Mar 2001 08:51:29 -0800

Hi-

     You may wish to contact their NOC (network
operations center) about the abuse.  Based on records
on the NOC Page
(http://puck.nether.net/netops/index.html) their phone
number is 1-800-900-0241 (this is probably a support
#, the list didn't have a direct #), but  Before you
contact their NOC, though, you shold call your own
NOC, as they may wish to call UUnet's NOC themselves,
and may have contacts at UUnet.  Because NOC's are
staffed by smart people, they can figure out that your
problem isn't "...of normal origin."  The NOC page I
mentioned earlier has more details... check it out.

Hope this helps,
Nick

--- "Ralf G. R. Bergs" <rabe () RWTH-AACHEN DE> wrote:
Hi there,

I have to report about 1 incident per day that is
caused by ip addresses
assigned to UUnet. Mostly it's sweeps across our
whole class C, sometimes
ICMP, sometimes even scans for 111/UDP. NONE of our
LAN IPs EVER leave our
LAN, since altho they're IPs officially assigned to
us I masquerade (NAT) them
at our router.

The usual answer I receive from UUnet is the
following:

    "The type of internet traffic you describe
appears to be of normal
origin."

As I explained above NONE of our LAN IPs ever can be
seen outside of our LAN,
so HOW ON EARTH should this be "of normal origin???"

Frankly I'm fed up with this kind of replies. I
don't know whether it's just
that the abuse personnel simply is underqualified
for their job, or whether
it's they simply can't cope with the growing number
of incidents caused by
their customers, but I don't feel like accepting
this kind of ignorance.

Any suggestions what I should do? If UUnet's
personnel doesn't get their act
together I could be forced to completely black-hole
their respective subnets
in our router.

Thanks,

Ralf


--
Sign the EU petition against SPAM:          L I N U
X       .~.
http://www.politik-digital.de/spam/        The
Choice      /V\
                                            of a
GNU      /( )\

Generation      ^^-^^




__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail.
http://personal.mail.yahoo.com/


Current thread: