black listing of web traffic

Chris Campbell Chris.Campbell at nebulassolutions.com
Tue Feb 9 19:49:56 UTC 2010


I know that cisco either are or have integrated the IronPort  
reputation service into their IPS devices, maybe a check on www.senderbase.org 
  could help.

Chris Campbell
---------------------

On 9 Feb 2010, at 19:36, "Andrey Gordon" <andrey.gordon at gmail.com>  
wrote:

> Hi list
>
> I have a problem that I can't seem to find a solution to yet. My  
> student
> network is being NATted out and anyone who's on that network had  
> troubles
> accessing random websites.
> For example, going to www.apple.com or www.facebook.com would work  
> great,
> but store.apple.com would either not load or take forever to open up.
>
> I've had that problem last week and thought I tracked it down to the  
> NAT ip
> being black listed with one of the span black lists. Even though  
> that IP is
> not used for mail out, that somehow seemed to affect it. Changing it  
> to a
> different one seemed to solve the problem and I got that original  
> address of
> the list in the mean time. Changed it back and everything was well,  
> until
> today.
> Same symptoms, but now I don't see us listed anywhere.
> The best description of the symptoms seems to be that that IP is rate
> limited or something.
>
> Anyone seen that? Are there any blacklists for web access?
>
> PS. I checked everything under my control and i don't see a bottle  
> neck
> anywhere or anything like and IPS working up or something....
>
>
> -----
> Andrey Gordon [andrey.gordon at gmail.com]




More information about the NANOG mailing list