nanog mailing list archives

Re: ARIN whois


From: Dean Anderson <dean () av8 com>
Date: Mon, 22 Nov 1999 14:16:25 -0500


Gee. We operated relay services for almost 4 years with only one incident before this summer.  Since the antispammers 
started inciting attacks, we've been attacked more than 2 dozen times since July.  Coincidence?  I think not.

Also, there aren't very many _real spams_ in the attacks. The attacks are spamlike, but generally not spam.  But the 
content of the messages doesn't matter. I don't care if its spam or not spam. Services rendered are worth money.  We 
are entitled to collect the money regardless of the purpose of the relayed messages. If the money exceeds $5000, the 
unauthorized access becomes criminal. We complain to FBI. The "relayer" will be found. And we are still entitled to the 
money for the services provided.

                --Dean

Around 10:16 PM 11/21/1999 -0700, rumor has it that Forrest W. Christian said:

On Sun, 21 Nov 1999, Kai Schlichting wrote:

THEY WILL FIND YOUR RELAYS ON THEIR OWN, AND THEY WILL ABUSE THEM, NO
MATTER HOW LOUD YOU SCREAM.

In transition to a new mail server (with a new address), I installed a
plug-gateway on the old server to redirect mail.

Unfortunately, plugd hides the ip address of the sender, and since I trust
my netblocks, all of the ip addresses on the old server became "spam relay
entry points".

It took the spammers 96 hours to find 3 of the addresses on that box and
for us to be listed in orbs.  I figured I would have at least had a week
or two to figure out a better way.

I ended up staying up all night getting transparent proxying to work right
on the new server and making it work with a cisco route-map.

- Forrest W. Christian (forrestc () imach com) KD7EHZ
----------------------------------------------------------------------
iMach, Ltd., P.O. Box 5749, Helena, MT 59604      http://www.imach.com
Solutions for your high-tech problems.                  (406)-442-6648
----------------------------------------------------------------------




++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
           Plain Aviation, Inc                  dean () av8 com
           LAN/WAN/UNIX/NT/TCPIP          http://www.av8.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Current thread: