North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: To send or not to send 'virus in email' notifications?

  • From: Mark Segal
  • Date: Wed Aug 20 10:50:32 2003

All of "my" bounces are coming from emails that originated from
195.157.87.253...  Maybe it's the same guy with others here?

Mark

Fyi..
[email protected]:~> whois -h whois.ripe.net 195.157.87.253
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum:      195.157.70.0 - 195.157.87.255
netname:      NSUK-PARTITION-LL
descr:        Connectivity
country:      GB
admin-c:      NSUK2-RIPE
tech-c:       NSUK1-RIPE
status:       LIR-PARTITIONED PA
remarks:      **************************************************************
remarks:      * Please do not send abuse reports to tech or admin contacts *
remarks:      *      All abuse reports to [email protected]          *
remarks:      **************************************************************
remarks:      * This is an partition object and does not represent a valid #
remarks:      # assignment.  Valid assignments have status: ASSIGNED PA    #
remarks:      ##############################################################
notify:       [email protected]
mnt-by:       NETSCALIBURUK-MNT
mnt-lower:    NETSCALIBURUK-MNT
changed:      [email protected] 20011025
changed:      [email protected] 20020110
changed:      [email protected] 20020514
source:       RIPE

route:        195.157.0.0/16
descr:        Netscalibur UK Ltd
origin:       AS8272
mnt-by:       NETSCALIBURUK-MNT
changed:      [email protected] 20010706
source:       RIPE

role:         Netscalibur UK Hostmaster
address:      Netscalibur UK Ltd
address:      9 Selsdon Way
address:      Cityharbour
address:      London E14 9GL
address:      UK
phone:        +44 (0)870 887 8800
fax-no:       +44 (0)870 887 8867
e-mail:       [email protected]
admin-c:      CSP3-RIPE
admin-c:      SY131-RIPE
tech-c:       NSUK1-RIPE
tech-c:       NSUK3-RIPE
nic-hdl:      NSUK2-RIPE
remarks:      Hostmaster
remarks:      ****
remarks:      * All abuse reports to [email protected]
remarks:      ****
notify:       [email protected]
mnt-by:       NETSCALIBURUK-MNT
changed:      [email protected] 20010712
changed:      [email protected] 20010731
changed:      [email protected] 20020109
changed:      [email protected] 20020116
source:       RIPE

role:         Netscalibur UK NOC
address:      Netscalibur UK Ltd
address:      9 Selsdon Way
address:      Cityharbour
address:      London E14 9GL
address:      UK
phone:        +44 (0)845 117 2200
fax-no:       +44 (0)870 887 8867
e-mail:       [email protected]
admin-c:      ZP64-RIPE
admin-c:      DJH8-RIPE
tech-c:       NSUK2-RIPE
tech-c:       NSUK3-RIPE
nic-hdl:      NSUK1-RIPE
remarks:      Network Operations Center
remarks:      ****
remarks:      * All abuse reports to [email protected]
remarks:      ****
notify:       [email protected]
mnt-by:       NETSCALIBURUK-MNT
changed:      [email protected] 20010711
changed:      [email protected] 20020116
source:       RIPE




--
Mark Segal 
Director, Network Planning
FCI Broadband 
Tel: 905-284-4070 
Fax: 416-987-4701 
http://www.fcibroadband.com

Futureway Communications Inc. is now FCI Broadband


-----Original Message-----
From: Jim Deleskie [mailto:[email protected]] 
Sent: August 20, 2003 10:36 AM
To: [email protected]
Subject: RE: To send or not to send 'virus in email' notifications?



Kind of like a statement made @ a security conference I was recently at,
'Hacking from the conference = Dismissal, if you have to ask No you
shouldn't'




-----Original Message-----
From: Gregory Hicks [mailto:[email protected]]
Sent: Wednesday, August 20, 2003 10:30 AM
To: [email protected]; [email protected]
Subject: Re: To send or not to send 'virus in email' notifications?




> Date: Wed, 20 Aug 2003 10:25:28 -0400
> From: Joe Maimon <[email protected]>
> To: [email protected]
> Subject: To send or not to send 'virus in email' notifications?
> 
> 
> Considering the amount of email traffic generated by responding to
> forged  virus laden email from culprits like sobig should email virus 
> scanning systems be configured to send notifications back to sender or 
not?

Not.