http://permalink.gmane.org/gmane.network.opennic.general hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.network.opennic.general/8907 <pre> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ns1.on.ca (216.167.252.196) and ns6.on.ca (216.167.252.197) are now decommissioned due to network performance degradation as a result of ddos traffic. Will be keeping ns4.on.ca (216.167.252.195) up for the time being. - --Mike -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJRvunkAAoJEA7EcEr0emgfsxcIAItPbKMfuZ8os+2zEpBv5eCv K/e9bPhAMeRgZSAo84ZqzlMUh5Nh0JIQSXPtL3LVnvMigHtI7BgL8QkXO2bIK20g 9g3VPfEgqLuEgYm5TI5F6BK9PoiUyCDxHvUH1wM+Rtiy1n5jwxKNd5cDLZLjbAK2 PhD078QUkKeSd45IeLOllLIyeL4wRFWC0CZU3RTSqKElrCdb9FiEfByMd2Lp84eM DgJSp1i2a1EfZ1+LM+05XWwx94WygfEbqJz1EW0D08ySqkW7k8uFBYRUvIlBCnQP 0HfTm4XjVXFkDUxYHTyZ0u7gEtBFuaL8VRPsKsUayfazGN/Q9NzsWKOCHZp6DKk= =TPGm -----END PGP SIGNATURE----- -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> mike 2013-06-17T10:50:18 http://permalink.gmane.org/gmane.network.opennic.general/8906 <pre>It would fail unless you unblocked the test server. Without the testing, we have no way of knowing if your server is still online or not. However there is only a single IP you would need to whitelist, and you will see pretty limited traffic from this server (about 50 queries every 15 minutes). On 06/12/2013 08:51 AM, Maximi89 wrote: -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Jeff Taylor 2013-06-14T19:51:50 http://permalink.gmane.org/gmane.network.opennic.general/8905 <pre> Fail. XD -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Alex M (Coyo 2013-06-13T16:36:46 http://permalink.gmane.org/gmane.network.opennic.general/8904 <pre>Hello, For what it is worth, this domain was "Suspended by Registrar" when I checked today. I suppose it doesn't matter much if we blocked it or not. --Alex -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Alex Hanselka 2013-06-13T11:22:02 http://permalink.gmane.org/gmane.network.opennic.general/8903 <pre>Yes, this really is an excellent bit of work! Thanks for your time and efforts, they are appreciated and your software used regularly. Peter On 12/06/13 19:43, Jeff Taylor wrote: -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Peter Green 2013-06-12T19:06:03 http://permalink.gmane.org/gmane.network.opennic.general/8902 <pre>you earned yourself a badge of honour (and not a red one). great work, thanx a lot! On Wed, 12 Jun 2013 12:43:02 -0600 Jeff Taylor &lt;shdwdrgn&lt; at &gt;sourpuss.net&gt; wrote: </pre> subhuman 2013-06-12T19:01:25 http://permalink.gmane.org/gmane.network.opennic.general/8901 <pre>I added tooltips to the server history page, so you you hover over the name of a server, it will show the IP address. If you hover over an IP, it will show the server name. Name/IP displays can be changed under the 'Server' tab of the top menu. If you haven't seen the new history page, check it out at http://opennicproject.org/report/ There are several new features, including an entirely new method of displaying the history of an individual server, and a world-map showing the location of all servers. -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Jeff Taylor 2013-06-12T18:43:02 http://permalink.gmane.org/gmane.network.opennic.general/8900 <pre>As was mentioned earlier in this thread if you wanted to restrict access to only local users all you would need to do is unblock the test server to have the status updated correctly. In the end I decided to not do this as there were connection availability issues with our ISP and the amount of legitimate traffic was starting to overwhelm the connection we had. I looked into moving it to a local data-center but the cost of server hosting here is quite expensive, not to mention the DDoS attacks which would be a pain if we couldn't get them blocked upstream and save our bandwidth and data cap. Dean On Thu, Jun 13, 2013 at 2:51 AM, Maximi89 &lt;maximi89&lt; at &gt;gmail.com&gt; wrote: -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Dean Gardiner 2013-06-12T17:05:36 http://permalink.gmane.org/gmane.network.opennic.general/8899 <pre>What happens if the script can't do the test due to a restrictions like the ones commented by Dean, if he blocks his servers to only national IPs... your script will work anyway? or it will fail? have you tried this before? 2012/10/13 Jeff Taylor &lt;shdwdrgn&lt; at &gt;sourpuss.net&gt; </pre> Maximi89 2013-06-12T14:51:04 http://permalink.gmane.org/gmane.network.opennic.general/8898 <pre>heya-- I've got a resource at a government run security department willing to work with me on this DDOS issues we are having at OpenNIC. The goal here is to research the patterns and hopefully start warning other people in a unified way when an attack "breaks-out" I need some T2 operators to work with me on this who are currently being abused. Email me privately for info. --julian -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Julian DeMarchi 2013-06-12T02:27:08 http://permalink.gmane.org/gmane.network.opennic.general/8897 <pre>If you're disputing the fact that I will get shut down if I don't monitor my servers, then back it up with facts better than the few people it has occurred to here. If you have better ways of monitoring than us that are somehow more privacy friendly, feel free to share. Meanwhile the whining and insults don't help. On Tue, Jun 11, 2013 at 7:40 PM, Quinn Wood &lt;wood.quinn.s&lt; at &gt;gmail.com&gt; wrote: -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Guillaume Parent 2013-06-12T02:14:07 http://permalink.gmane.org/gmane.network.opennic.general/8896 <pre>Julian, The gentleman in question and I have had a brief offline conversation. It was less than meaningful. I suggest further discussion is useless. As to his claim of being a fellow Christian, I would refer him to Matthew 7:20. John Kozlowski &lt;http://shofardomain.com/&gt; ShofarDomainT &lt;http://ShofarDomain.com&gt; http://ShofarDomain.com Email: &lt;mailto:John.Kozlowski&lt; at &gt;ShofarDomain.com&gt; John.Kozlowski&lt; at &gt;ShofarDomain.com Phone: +1 (423) 716-6432 Facebook: &lt;https://www.facebook.com/ShofarDomain&gt; https://www.facebook.com/ShofarDomain Twitter: &lt;https://twitter.com/ShofarDomain&gt; https://twitter.com/ShofarDomain YouTube: &lt;http://www.youtube.com/ShofarDomain&gt; http://www.youtube.com/ShofarDomain -----Original Message----- From: discuss-request&lt; at &gt;lists.opennicproject.org [mailto:discuss-request&lt; at &gt;lists.opennicproject.org] On Behalf Of Julian DeMarchi Sent: Tuesday, June 11, 2013 7:51 PM To: discuss&lt; at &gt;lists.opennicproject.org Subject: Re: [opennic-discuss] New domain to watch out for abuse - ddo</pre> John Kozlowski (ShofarDomain.com 2013-06-11T23:58:58 http://permalink.gmane.org/gmane.network.opennic.general/8895 <pre> You're really not making sesne Quinn. Can you please stop this non-sense. --julian -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Julian DeMarchi 2013-06-11T23:50:38 http://permalink.gmane.org/gmane.network.opennic.general/8894 <pre>On Tue, Jun 11, 2013 at 5:26 PM, Julian DeMarchi &lt;julian&lt; at &gt;jdcomputers.com.au&gt; wrote: I believe the academics usually respond to queries like this with the apt phrase "Fuck you all." -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Quinn Wood 2013-06-11T23:41:47 http://permalink.gmane.org/gmane.network.opennic.general/8893 <pre>You seem to be under the odd impression that continuing the internet's existence is better than caving into value degradations. That's law enforcement logic. -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Quinn Wood 2013-06-11T23:40:09 http://permalink.gmane.org/gmane.network.opennic.general/8892 <pre> Your point wasn't obvious in the first message you posted. Maybe being a bit clear instead of being cryptic? Not only does the domain look fishy, it is setup for abuse. How so? We are getting constant DDOS abuse on the T2 servers. A good admin will watch the logs for any abusive pattern and share with the community. staticsafe know's what he is talking about and looking for. He has done the community a favour by pointing this domain out. Furthure to this Quinn, it is his _personal_closed_resolver_ I don't understand your big issue here? Is there one? Are you just making noise? --julian -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Julian DeMarchi 2013-06-11T22:26:14 http://permalink.gmane.org/gmane.network.opennic.general/8891 <pre>Amen, I have a cron job that calls a script to rm the logs daily at midnight... for my logs info it says deleted every day... Btw: my server ip's still aren't in tier 2 reports. On 2013-06-11 09:11, Kenny Taylor wrote: </pre> Chris S (Pei 2013-06-11T18:26:28 http://permalink.gmane.org/gmane.network.opennic.general/8890 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On my own domains, I have never expected any level of privacy when I create DNS records. They're public and I'm putting them out there for the world to use. On the DNS server side, if we're looking at logs with obsfucated IP addresses and see a questionable pattern, like constant ripe.net ANY queries, it seems reasonable to investigate further with the goal of blocking the abusive traffic. Ultimately, the end user has to decide whether to trust the DNS server admin. If we say we obsfucate logs, they put faith in us to do so. If we say raw logs may be reviewed solely to investigate abuse, it's also a matter of faith in the admin. I think if we stick to that strict review only to mitigate abuse policy, we're still upholding our commitment to end-user privacy. Guillaume Parent &lt;gparent&lt; at &gt;gparent.org&gt; wrote: -----BEGIN PGP SIGNATURE----- Version: APG v1.0.8 iQJDBAEBCAAtBQJRt0wlJhxLZW5ueSBUYXlsb3IgPGtlbm55dGF5bG9yQHJ1bmJv eC5jb20+AAoJELOordj4VKFQFXoP+waWS8</pre> Kenny Taylor 2013-06-11T16:11:17 http://permalink.gmane.org/gmane.network.opennic.general/8889 <pre>You can't avoid the privacy violation here. Either we monitor our servers and we have to occasionally look at record names and IP addresses, or we don't monitor our servers and some of us get shut down for being internet bastards. On Tue, Jun 11, 2013 at 11:23 AM, Alex Nordlund &lt;deep.alexander&lt; at &gt;gmail.com&gt;wrote: -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Guillaume Parent 2013-06-11T15:41:14 http://permalink.gmane.org/gmane.network.opennic.general/8888 <pre> How is it a privacy violation if it's found on the person's (I quote) *personal closed resolver*? Best regards, Alex -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Alex Nordlund 2013-06-11T15:23:00 http://permalink.gmane.org/gmane.network.opennic.general/8887 <pre>On Tue, Jun 11, 2013 at 1:17 AM, Julian DeMarchi &lt;julian&lt; at &gt;jdcomputers.com.au&gt; wrote: You've completely missed the point. The point is my distaste with someone looking through domain requests and the subsequent advice to block access to one just because it's name looked fishy. If the type of query was what was being acted on, it would have already been in a filter and the complaint would have never been made. It's a privacy violation masquerading as ok because malicious behavior was found.. -------- You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe&lt; at &gt;lists.opennicproject.org </pre> Quinn Wood 2013-06-11T13:23:17 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.network.opennic.general