This was received from Christopher Neill (noise@happy.cow.org) a customer/employee
of Verio (qual.net). We've complained before about him relaying off our servers,
and attempting to sell or extort services on behalf of Verio or himself.
This would appear to be a threat to cause damage to our systems. He suggests
we sue Verio.
This message was prompted by a reference to a discussion last February in which
Ravi Pina intercepted and published traffic, violating the privacy of protected
communications transiting the Verio network in violation of 18 USC 2511. He
posted this to the Nanog list, and then apologized. I did not report it to verio
security at the time. However, it seems that people working at or for Verio
or their subsidaries have not learned about the privacy laws that apply to network
providers. Perhaps it should be reported to law enforcement authorities.
Please take appropriate action.
--Dean
>X-Persona: <Av8>
>>From owner-spam-l@PEACH.EASE.LSOFT.COM Thu Jun 10 14:48:17 1999
>References: <3.0.32.19990610140851.00f8e048@odie.av8.com>
>X-No-Archive: yes
>Date: Thu, 10 Jun 1999 14:46:40 -0400
>Reply-To: Christopher Neill <noise@COW.ORG>
>Sender: Spam Prevention Discussion List <SPAM-L@PEACH.EASE.LSOFT.COM>
>From: Christopher Neill <noise@COW.ORG>
>Organization: Revolt Technologies
>Subject: Re: BLOCK: Earthlink's persistantly connected open relay back door
>X-To: Dean Anderson <dean@AV8.COM>
>To: SPAM-L@PEACH.EASE.LSOFT.COM
>
>slander slander slanderson! now with twice the hot air!
>
>#!/bin/sh
>
>while [ 1 ] ; do
> ( sleep ; echo ehlo dean@av8.com ; \
> echo 'mail-from: dean@av8.com' ; \
> echo 'rcpt-to: dean@av8.com' ; \
> echo data ; echo 'have we reached the $5000 mark yet?' ; \
> echo . ) | telnet odie.av8.com smtp
>done
>
>On Thu, Jun 10, 1999 at 02:08:53PM -0400, Dean Anderson wrote:
>> Liar. The following message can also be found in the nanog archives.
>
>admission of something be inappropos is professional curteosy and not
>admission of guilt. certainly, merit.edu, nanog and digex would be
>guilty of this 2511 hot air for their looking glass by your vacuuous
>legal standards.
>
>>
>> Note that it came from ravi@verio.net. I suppose you may have been
a
>> contractor, or at a subsidary (qual.net, a Verio aquisition) or some
such,
>> but its clear from the addresses that you were acting on Verios behalf
from
>> verios domain, using equipment that ultimately was controlled by Verio.
>> Unless you were defrauding the verio.net domain somehow.
>>
>> It was clearly illegal since norcal systems wasn't a customer of Verios.
It
>> wasn't even a customer of a customer of Verios. An uplink several
>> providers away happened to buy transit from Verio.
>
>Actually, we imposed a penalty on Webbernet (WNOL), and in fact I put the
>access-list in place. I put it in place on the VIP2 CT3IP serial interface
>for my customer (at the time) WNOL. I Called them and told them what I was
>doing. I was given a very hearty blessing by their technical admin who
>was very, very upset about what their customer was up to.
>
>It was maybe not the best choice to post specifics about which customer
>was spamming, but it was not illegal.
>
>>
>> Network path:
>> spam customer ->
>> norcal-systems ->
>> layer9.net ->
>> webbernet.net ->
>> qual.net(verio, where Ravi snooped the traffic) ->
>> alternet(UUnet) ->
>> BBN ->
>> Av8 ->
>> our customers
>>
>> Notice that in the first mail you sent, you reported that the person
from
>> layer9.net didn't yet have permission from his manager to block it.
If he
>> doesn't have permission, you certainly don't. But you snooped it anyway.
>
>Put the pipe down. This was a cisco access-list. the the top few bytes of
>the IP datagram were looked at to determing source IP address and TCP
>protocol. Its what we call "routing" in the industry. "Routing"
IP
>requires that you program a IP routing switch to forward OR DENY packets
>based on the criteria that you give it. If you were unable to look
>up statistics about what you switch was doing, then the job would be
>much, much harder.
>
>>
>> Following is your first message from verio.net, and after that is your
>> apology, which then came from cow.org, instead of verio.net.
>
>Sue Verio, hot air boy.
>I triple-dog dare you. Sound silly? Well, so is this entire thread.
>I suggest you drop it.
>
>--
>he's the latest super hero, with powers so profound
> he can leap a dotted line in just a single bound
>i know you must have seen him in books and magazines
> he's the quintessential mindless modern epicene
>
>