Paging someone at SonicWall/Dell

Thu Mar 24 13:55:09 UTC 2016

Hi Dan,

Did you manage to get in touch with anyone? If not, I can attempt to broadcast to the Dell Networking group internally. There should be Sonicwall people on there that can help.

-Vinny

-----Original Message-----
From: NANOG [mailto:nanog-bounces at nanog.org] On Behalf Of Dan Mahoney, System Admin
Sent: Monday, March 21, 2016 9:47 PM
To: nanog at nanog.org
Subject: Paging someone at SonicWall/Dell

All,

If anyone has any contacts at Dell/SonicWall that can assist, their latest firewalls have a misfeature that have started blocking F-root (ISC, my
Day-job) as a possible botnet responder.

You can reach me, 24/7, at 703-338-2497, or at dmahoney at isc.org.

Needless to say, this is seriously bad. As we ourselves are not Sonicwall users, our options here are limited.

I've gotten their usual call center nonsense where they told me "I need to contact my system administrator" and wouldn't transfer me further.

I've submitted a "removal" request via the form at http://botnet.global.sonicwall.com/change, but that still doesn't help if there's a firmware out there doing broken hueristics and mass-DDOSing folks.

If for some reason there actually IS some botnet-related traffic going on toward the root servers (the root servers get a LOT of garbage, so this doesn't surprise me), we'd like to know that too.

-Dan Mahoney

--

--------Dan Mahoney--------
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144 AIM: LarpGM
Site: http://www.gushi.org
---------------------------