Scanning (was Re: Stealth Blocking)
Christopher A. Woodfield
rekoil at semihuman.com
Sat May 26 14:35:47 UTC 2001
About two years ago the <vijay> promising local ISP </vijay> I worked
for saw the number or ORBS-listed hosts withing its netspace go from ~400
to over 3,000 in one week. Among the listings was a class C where EVERY HOST,
254 IPs, in the block was listed. Granted, each one was an open relay, but the
point is that each IP was individually relay tested. When questioned about
this, Alan Brown reponded that he had "received an unusually large number
of nominations" for hosts in our netspace. Uh huh. Sure.
-C
On Thu, May 24, 2001 at 02:04:02PM -0400, Greg A. Woods wrote:
>
> [ On Thursday, May 24, 2001 at 08:52:07 (-0400), William Allen Simpson wrote: ]
> > Subject: Scanning (was Re: Stealth Blocking)
> >
> >
> > (The problem with ORBS was not the scanning, but rather the aggressive
> > nature of the scanner,
>
> ORBS does not scan. Period.
>
> If you believe it does then prove it with complete logs that can be
> verified by looking through the ORBS database.
>
> --
> Greg A. Woods
>
> +1 416 218-0098 VE3TCP <gwoods at acm.org> <woods at robohack.ca>
> Planix, Inc. <woods at planix.com>; Secrets of the Weird <woods at weird.com>
>
--
---------------------------
Christopher A. Woodfield rekoil at semihuman.com
PGP Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB887618B
More information about the NANOG
mailing list