To: nanog@merit.edu
Subject: ORBS block
From: Dean Anderson <dean@av8.com>
Date: Thu, 16 Dec 1999 16:44:19 -0500
Cc: noc@bbn.com, noc@netgate.net.nz, abuse@bbn.com, abuse@netgate.net.nz
Delivered-To: nanog-outgoing@merit.edu
Sender: owner-nanog@merit.edu

--------------------------------------------------------------------------------


Well, after almost a month of no attacks and a coincident month of ORBS blocking
at BBN/NZ link, the block on ORBS has been lifted, and we have started getting
relay attacks again. I think thats pretty conclusive evidence that they are
the cause of the relay attacks.

I'm hoping the removal was an oversight, but I'd like to ask people to please
put the following access lists in:

access-list 104 deny ip 202.36.148.5 0.0.0.255 any
access-list 104 deny ip 202.36.147.16 0.0.0.255 any

Luckily, the FBI just called me back to begin work on last months attacks.
I guess Egypt Air must be getting wrapped up. I guess I have some stuff to add
to our complaints. Actually, given the cause and effect demonstrated by the
block, I'm hoping that this will motivate the FBI to do something with ORBS.

--Dean

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Plain Aviation, Inc dean@av8.com
LAN/WAN/UNIX/NT/TCPIP http://www.av8.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++