Scanning (was Re: Stealth Blocking)

Christopher A. Woodfield rekoil at semihuman.com
Sat May 26 14:35:47 UTC 2001


About two years ago the <vijay> promising local ISP </vijay> I worked 
for saw the number or ORBS-listed hosts withing its netspace go from ~400 
to over 3,000 in one week. Among the listings was a class C where EVERY HOST, 
254 IPs, in the block was listed. Granted, each one was an open relay, but the 
point is that each IP was individually relay tested. When questioned about 
this, Alan Brown reponded that he had "received an unusually large number 
of nominations" for hosts in our netspace. Uh huh. Sure.

-C

On Thu, May 24, 2001 at 02:04:02PM -0400, Greg A. Woods wrote:
> 
> [ On Thursday, May 24, 2001 at 08:52:07 (-0400), William Allen Simpson wrote: ]
> > Subject: Scanning (was Re: Stealth Blocking)
> >
> > 
> > (The problem with ORBS was not the scanning, but rather the aggressive 
> > nature of the scanner,
> 
> ORBS does not scan.  Period.
> 
> If you believe it does then prove it with complete logs that can be
> verified by looking through the ORBS database.
> 
> -- 
> 							Greg A. Woods
> 
> +1 416 218-0098      VE3TCP      <gwoods at acm.org>     <woods at robohack.ca>
> Planix, Inc. <woods at planix.com>;   Secrets of the Weird <woods at weird.com>
> 

-- 
---------------------------
Christopher A. Woodfield		rekoil at semihuman.com

PGP Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB887618B




More information about the NANOG mailing list