RE: To send or not to send 'virus in email' notifications?

[Mark Segal <MSegal () Corporate FCIBroadband com>]

All of "my" bounces are coming from emails that originated from
195.157.87.253...  Maybe it's the same guy with others here?

Mark

Fyi..
netadmin@aaa-01:~> whois -h whois.ripe.net 195.157.87.253
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum:      195.157.70.0 - 195.157.87.255
netname:      NSUK-PARTITION-LL
descr:        Connectivity
country:      GB
admin-c:      NSUK2-RIPE
tech-c:       NSUK1-RIPE
status:       LIR-PARTITIONED PA
remarks:      **************************************************************
remarks:      * Please do not send abuse reports to tech or admin contacts *
remarks:      *      All abuse reports to abuse () netscalibur co uk          *
remarks:      **************************************************************
remarks:      * This is an partition object and does not represent a valid #
remarks:      # assignment.  Valid assignments have status: ASSIGNED PA    #
remarks:      ##############################################################
notify:       ripe () netscalibur co uk
mnt-by:       NETSCALIBURUK-MNT
mnt-lower:    NETSCALIBURUK-MNT
changed:      ripe () netscalibur co uk 20011025
changed:      ripe () netscalibur co uk 20020110
changed:      ripe () netscalibur co uk 20020514
source:       RIPE

route:        195.157.0.0/16
descr:        Netscalibur UK Ltd
origin:       AS8272
mnt-by:       NETSCALIBURUK-MNT
changed:      ripe () netscalibur co uk 20010706
source:       RIPE

role:         Netscalibur UK Hostmaster
address:      Netscalibur UK Ltd
address:      9 Selsdon Way
address:      Cityharbour
address:      London E14 9GL
address:      UK
phone:        +44 (0)870 887 8800
fax-no:       +44 (0)870 887 8867
e-mail:       hostmaster () netscalibur co uk
admin-c:      CSP3-RIPE
admin-c:      SY131-RIPE
tech-c:       NSUK1-RIPE
tech-c:       NSUK3-RIPE
nic-hdl:      NSUK2-RIPE
remarks:      Hostmaster
remarks:      ****
remarks:      * All abuse reports to abuse () netscalibur co uk
remarks:      ****
notify:       ripe () netscalibur co uk
mnt-by:       NETSCALIBURUK-MNT
changed:      ripe () netscalibur co uk 20010712
changed:      ripe () netscalibur co uk 20010731
changed:      ripe () netscalibur co uk 20020109
changed:      ripe () netscalibur co uk 20020116
source:       RIPE

role:         Netscalibur UK NOC
address:      Netscalibur UK Ltd
address:      9 Selsdon Way
address:      Cityharbour
address:      London E14 9GL
address:      UK
phone:        +44 (0)845 117 2200
fax-no:       +44 (0)870 887 8867
e-mail:       noc () netscalibur co uk
admin-c:      ZP64-RIPE
admin-c:      DJH8-RIPE
tech-c:       NSUK2-RIPE
tech-c:       NSUK3-RIPE
nic-hdl:      NSUK1-RIPE
remarks:      Network Operations Center
remarks:      ****
remarks:      * All abuse reports to abuse () netscalibur co uk
remarks:      ****
notify:       ripe () netscalibur co uk
mnt-by:       NETSCALIBURUK-MNT
changed:      ripe () netscalibur co uk 20010711
changed:      ripe () netscalibur co uk 20020116
source:       RIPE




--
Mark Segal 
Director, Network Planning
FCI Broadband 
Tel: 905-284-4070 
Fax: 416-987-4701 
http://www.fcibroadband.com

Futureway Communications Inc. is now FCI Broadband


-----Original Message-----
From: Jim Deleskie [mailto:jdeleski () rci rogers com] 
Sent: August 20, 2003 10:36 AM
To: nanog () merit edu
Subject: RE: To send or not to send 'virus in email' notifications?



Kind of like a statement made @ a security conference I was recently at,
'Hacking from the conference = Dismissal, if you have to ask No you
shouldn't'




-----Original Message-----
From: Gregory Hicks [mailto:ghicks () cadence com]
Sent: Wednesday, August 20, 2003 10:30 AM
To: nanog () merit edu; jmaimon () ttec com
Subject: Re: To send or not to send 'virus in email' notifications?




> Date: Wed, 20 Aug 2003 10:25:28 -0400
> From: Joe Maimon <jmaimon () ttec com>
> To: nanog () merit edu
> Subject: To send or not to send 'virus in email' notifications?
>
>
> Considering the amount of email traffic generated by responding to
> forged  virus laden email from culprits like sobig should email virus 
> scanning systems be configured to send notifications back to sender or 
not?

Not.