North American Network Operators Group
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Historical
Re: FC: Email a RoadRunner address, get scanned by their securitysystem]
- From: John R. Levine
- Date: Sat Mar 15 10:06:51 2003
- Newsgroups: iecc.lists.nanog
> I only find it humorous that a majority of the network probes
> against my network come from RoadRunner cable modems as it is, yet
> they want to add to it by having their own server run a probe...
RR scans their own network far more intrusively than they scan outside
mail senders and thwack their own users all the time, only of course
nobody hears about that.
As I've said elsewhere, most of a network's real mail comes from
places that have sent mail before. If you get mail from a host that's
never sent you mail before, it is far more likely to be a compromised
relay or proxy sending spam than a legit mail server. Of course they
test it.
Put yourself in their shoes. They have a network with tens, probably
hundreds of thousands of users, all with a swell high-speed
connection, all under continuous attack by various sorts of malware.
Most of the users are running Windows 98 or XP systems which are at
least 30 critical security patches (that is to say, more than a month)
out of date. Realistically, what would you do?
--
John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 387 6869
johnl@iecc.com, Village Trustee and Sewer Commissioner, http://iecc.com/johnl,
Member, Provisional board, Coalition Against Unsolicited Commercial E-mail
|
