Contacting Network Admins Of Large Internet Companies?
lisa asks: "I work as a sysadmin for a national DSL ISP. Unfortunately, we've recently found that @Home.com is not allowing connections to port 25 from some of our primary mail servers: this of course means that our customers can't send mail to theirs. I've called and talked to people in their tech support, and only after several calls have we been able to get them to acknowledge there may be a problem. The trouble is, I can't seem to get in contact with any network admins there. Even the tech support person I spoke with expressed less than hopeful sentiments about being able to get this issue escalated. Has anyone had trouble like this with @Home or other simliar Internet companies?"
"What is the best way to get in touch with a Network Admin or someone who actually can do something about a network issue in cases like these? It would be nice to know that just writing root@home.com would get to their systems department, but I was told all of that mail goes through support first."
Anyways, he sometimes tells some stories about working at @home's tech support. Nearly all the calls were simple windows-based issues. The one type of tech call, which apparantly was pretty common that's pretty funny is people calling, completely outraged that their ping time went from 25 ms to 80 ms lately and they're getting killed! Something would change somewhere in a router and he'd spend hours, call after call, answering these pissed off gamers, who were insistant that AT&T had broken their network and it needed to be fixed. There are numerous stories about dumb users, which reportedly are the lion's share of all the tech calls. I asked once if he ever got a call from a real expert about a real problem... the answer: no.
It can be frustrating calling places like @home with a real problem. It's well known that their tech support sucks. Based on what I've seen from this guy we hired (admittedly a sample of only one), it looks like @home's poor service is a function of their system and its rules (admittedly based on the large volume of unskilled end-user questions), and not a lack of talent in their staff.
I'm posting this anonymously, even though I have a regular slashdot account (karma capped at 50), cause it just doesn't feel right to speak for my employer so much, but I thought maybe some of you reading these comments might like to hear a positive story about one of their (former) tech support guys.
You debug the problem and do 2 things.
First write it up (including bounced emails as examples) and send that to postmaster@
Secondly you use the domain registration or any information you can find to talk to their Mail Adminstrator. Call any number of theirs that will answer and be up front. Leave your direct number with anyone that will relay it. You are the email administrator for an ISP and you are having problems sending email to their customers. You need to speak with the email administrator or a member of their NOC. That's it. Be direct and don't bend. If you hit a wall take a name, and re-route. Evenutally you will get through.
As time goes on you turn up the heat. If your customer has alternate contacts for the @home customers, tell them the honest truth. You have debugged the problem and are attempting to get resolution but the provider on the other end is not being responsive and you are hitting a wall. Keep trying but place the blame solidly, you are responsive, they are not. Eventually you will get to talk to an administrator, if you know your stuff you'll get resolved. If you don't, you will get brushed off. End of story.
If you are really "Gung-Ho" you can also use accounts with other providers to debug the problem from multiple access points.
Good luck...
i wonder how many of those morons didn't listen to you because they were busy posting on slashdot.
I believe the poster is actually talking about trying to send mail to SMTP servers run by @Home's customers, not to @Home's SMTP servers. It's a pretty well known fact that some of @Home's cable partners impose certain restrictions to discourage their customers from running servers, one of these restrictions being filtering port 25. @Home can't do anything about this restriction since it is imposed by the cable company, who basically runs the show-- @Home only provides the ISP services.
- the administrative and technical contacts listed by network solutions
- the contacts listed by ARIN
- investor relations at the company (if publicly traded). visit their web page for IR contact.
- try to find email addresses for higher ups (VP responsible for infrastructure, CIO/CTO, etc.)
- postmaster@, security@, hostmaster@
then let it rip. You'll get mixed results, but often this will get someone's attention. Keep the email polite and to the point, but remind them that, after all, you've been trying for weeks to get this resolved the simple way, but THEY haven't been keeping their end of the bargain.$ whois comp-u-geek.net -h whois.opensrs.net
Registrant:
Reliablehosting.com
2227 Lake Tahoe Blvd.
South Lake Tahoe, ca 96150
US
Domain Name: COMP-U-GEEK.NET
Administrative Contact:
Blancett, Phil phil@oakweb.com
2227 Lake Tahoe Blvd.
South Lake Tahoe, ca 96150
US
530-542-4209
Technical Contact:
Blancett, Phil phil@oakweb.com
2227 Lake Tahoe Blvd.
South Lake Tahoe, ca 96150
US
530-542-4209
Billing Contact:
Blancett, Phil phil@oakweb.com
2227 Lake Tahoe Blvd.
South Lake Tahoe, ca 96150
US
530-542-4209
Record last updated on 20-Jan-2001.
Record expires on 17-May-2001.
Record Created on 17-May-2000.
Domain servers in listed order:
NS1.CALIFORNIA.NET 209.162.97.149
NS1.OAKWEB.COM 209.233.101.2
Go read this page about MAPS DUL. It will most likely explain your problem to you.
Beware, Nugget is watching... See?
I saw this behavior in the entire last week. I was trying to send e-mail to somebody on @Home, and it took about 4 days of retries before it finally went through. At the same time I called this person and asked if they were receiving any mail at all, and they were. So what the hell?
Beware, Nugget is watching... See?
You might want to look at this. It's a list of NOC contacts for many major providers.
I don't know how up-to-date it is, though.
--
Which makes it just like 99.999999% of other ISP's. I do wish that people knew the meaning of the term "customer service", but must admit that it will not happen within my lifetime -- it's too easy to make money nowadays by being a complete asshole jerk. Just advertise like hell, make sure that potential competitors can't get into the market by using monopolistic practices such as exclusive contracts, and voila, you have a company like @Home. No need to have customer service -- in fact, the harder you make it for your customers to get service, the better, because then you don't have to pretend to care.
If a competing ISP could get into my local cable drop, I'd switch ISP's in a minute. But by signing monopolistic exclusive contracts with local cable providers, @Home can continue providing lousy service while not giving a damn.
I remember when you could go straight to the NOC's web site and find out what tickets were open. That headed off a lot of geeks calling in with "did you know you had a routing loop between router-xyz.dallas.net and router-zzzy.dallas.net?" You looked at the NOC's ticket list, said to yourself "Oh, they already know about that", and went your way. Today you can't do that, because the national service providers don't want you to know how crappy their service is. The sad thing is that this attempt at decieving us has convinced us that they have something to hide.
Oh well. I guess the days when producing a good product at a good price in a friendly manner was the key to success are long gone. Today the goal appears to produce the shoddiest product for the highest price while providing the crappiest service -- then advertise the hell out of it, while using monopolistic tactics to drive the guys who do believe in producing good products out of business. Sort of like Microsoft did to folks like Digital Research, Quarterdeck (remember DesqView?), and (soon) Apple.
-E
Send mail here if you want to reach me.
Today, if something goes down, you have no idea whether anybody knows about it or not. None of the backbone NOC's post trouble tickets to the open Internet anymore. Apparently they don't want anybody to know how lousy their service is. The sad thing is that by keeping these secret, they've caused a thousand-fold escalation in the number of phone calls coming in saying "Hey, did you know your route between Dallas and Atlanta is flapping?". Aside from convincing the rest of us that they have something to hide, of course -- but if you're part of an oligarchy that has collectively decided (illegal cartel?) to screw the customer, there isn't much I can do about you deciding to be a deceitful scumbag (well, I could create a new backbone, but that isn't exactly cost-effective).
-E
Send mail here if you want to reach me.
Also, if you want to be taken seriously, don't mention that you use Linux if you can help it. 5 years ago it would've meant "hardcore programmer on the line escalate to admin", it now means "Windows dork trying to survive with Linux, much hand holding is about to occur. Shield busy admins from harm!"
Don't just drop techno babble. If the technicians don't understand what you said, they'll assume (for their own safety) that you don't know anything. They will not escalate you.
Flat out asking to speak to an admin will probably just make the technician feel insulted and less inclined to help you.
For best results, if possible, work with the technician, try their suggestions (and tell them that they all failed), make him take out a trouble ticket so the whole spiel is recorded and doesn't have to be repeated. In most cases they'll escalate it when all of their suggestions fail.
These are just my observations from the inside. *shrug*
As a system administrator at Earthlink, I am interested in looking into the problem you describe. Without more information I can't say definitively whether it is due to Pac Bell, us, or you. Please send details of you investigation to the above address.
Note that this is primarily for personal interest. I may or may not be able to diagnose the problem.
--
"L'IT c'est moi!"
I can assure you that the system administrators at Earthlink are extremely concientious and try to err on the side of permissivity when trying to strike a balance between keeping our head above the spam and letting legitimate mail through. It is an extremely difficult task and we are fallible. It is clear however, that we can't afford to be hands off, nor can the rest of the net.
--
"L'IT c'est moi!"
I'd be interested in hearing the details on this. Email me if you care to.
--
"L'IT c'est moi!"
The average spammer uses a proggie to send hundreds of spam e-mails every hour, so why don't they just monitor the SMTP transfers per hour and then draw their own conclusions?
Let me preface this by saying that while I am an Earthlink employee, the following is a personal opinion:
The matter of port 25 blocking is disconcerting to me as a proponent of a free internet. However, spam generated by Earthlink customers dramatically affects other ISPs. There is a reason that if you look on Maps.vix.com, Earthlink's notes say something like "Formerly a prodigious source of spam."
First of all, understand that the semantics of email are seemingly designed for DOS attacks. What other protocol is designed to allow a single message to be replicated many times by an intermediate server at no cost to the originating host. Left unchecked, spam is so bad that you would never get any mail. So we fight a vailiant battle at ISPs to keep our customers free while keeping the services they depend on running at a reasonable cost. At Earthlink we have no fewer than 4 separate independent spam managament tools that I can think of off hand.
Every day I see the effects of being on the receiving end of networks which don't block port 25. While it would be eminently preferable to use traffic shaping at the router, rather than outright blocks, the protocol analysis required to identify and block spam is very involved and to the best of my knowledge can't be done at the router level except in very crude ways. For instance you can't simply monitor bytes sent, because a single message may have many recipients so the size multiplies. You can't measure connections since one SMTP connection can have multiple messages sent in it. Even at the application level it is difficult.
Tell me of a better way and we will will most likely use it. I would like nothing better than to keep the internet as unfettered as possible.
--
"L'IT c'est moi!"
by chance are your mail servers in the RBL? I'm not sure if @home uses it, that might be one of the problems.
Other than that I can't think of any reason why a valid (and popular) mail server would reject mail from yours.
-maz
<happiness>beer</happiness>
I'm an @home customer, and *I* can't connect to thier SMTP servers.
At one point a few months ago, thier mail servers started terminating my connections on port 25. Even if I open a telnet session on port 25, I get disconnected before I do anything. Since I don't even mention my login/password to it, it's clearly not that - it must be denying me based on IP or whatever.
I called thier useless tech support people, which of course forced me to set up outlook (twice) just so they could be shown that it wasn't *my* problem. They also made me unplug my firewall, and plug my windows box into the network directly, and I was still getting the same error (I had no problem with this, unlike the Outlook fiasco - if telnet doesn't work...).
I got escalated to level 2, and then they sent a notice or whatever out to @home people (this was a Rogers tech support centre I think), and then the ticket got closed, apparently my 'problem solved'. Which, of course, it wasn't. Did that again. Then again. Every time, they were telling me the problem had been fixed when it hadn't been.
I gave up and am using a friend's mail server he has set up on DSL.
I should pursue this, I guess...
--
I work as a senior sysadmin at one of the bigger ISPs in country, so most of the time I deal with major problems.
:-)
Usually when I have a problem which is in somebody's else network (mostly BGP routing/mail filtering) I call to their official tech support, make serious voice and say "Good day, I'm a senior sysadmin from XXX, it seems you have a problem and none of customers can reach you, can you connect me to somebody responsible for routers / BGP / servers / SMTP?"
Believe, most of them time I get connected at least to somebody who can recognize the problem and connect to a higher level admin if needed.
So, in your case, try calling them and pretend that you have a bigger problem than it really is.
And don't know about @Home, but here I go through unresolved cases through our support system from time to time, just in case the problem didn't get to higher levels.
Sympatico block/s/ed all incoming mail from yahoo.com addresses. When I used their service there was all kinds of complaints on their news groups, and it didn't seem as though anything was being done about it. It might have had something to do with spam coming from yahoo.com, but I really couldn't confirm that.
-kidlinux.
I propose that we have a secret geek codeword that can immediately identify each of us as a member of the geek commmunity
We have. We will tell you when you are ready.
__
__
Men with no respect for life must never be allowed to control the ultimate instruments of death.
GW Bu
Our local University's Computing & Network Services people became so tired of @HOME they now block all @HOME users accessing the university networks through @HOME Proxy Servers.e ?p x4ar.html
Their published policy is pretty harsh on this.
See:
http://ice-atm.ucs.ualberta.ca/htbin/blocknotic
Maurice W. Hilarius Voice: (778) 347-9907
See, but this is patently goofball. If all people
who call themselves mail admins were to take minimal
precautions (no open relays, require some form of authentication [pop before smtp, etc.] before allowing an SMTP connection, subscribing to one of the several extant mail-abuse blackhole lists, etc. (you know, the common sense stuff), then ISPs wouldn't have to block _any_ outgoing ports.
sure, but in that circumstance any correctly configured mail server would reject mail coming from a dial pool anyhow, so the "openness" of the port is completely moot. The only people you would be able to send mail to would be people on other dial access connections. The conversation is ludicrous.
/dev/nul.
Fully 50% of the SPAM I used to see originated from the dialpools of the gargantuan ISPs of the world. UUnet, Earthlink, PSInet etc. Since I have converted all of the mail servers I administer to utilise the MAPS-DUL the spam traversing my network has been massively cut down. None of these servers will accept smtp traffic from inside dial-pool netblocks. the RBL is very effective against the cretins who run open exchangers. I would like to note that since implementing the MAPS-DUL, my stress level has also signifigantly dropped as I no longer have to endure the silly autoresponders that these large ISPs have working the abuse@ , postmaster@, and root@ email addresses. I'm positive that the majority of abuse mail is piped to
Seriously, nmap their servers. when someone writes back complaining, you have a contact to get stuff fixed.
I'd also check whois on thei main domains.
If all else fails, dig for titles on their web page, sr. whatever and work your way down. that's a lot easier than working your way up.
It clearly said that Pac Bell wasn't blocking port 25, but that Earthlink was blocking Pac Bell's DSL users.
This doesn't always work either... we had someone who was confusing our front line techs with terms like traceroute... (Ok, we need to train our front line a little more)
The problem actually ended up being that they were dialed in on a email only account - everything but email to our server was firewalled out. Certainly not an issue to bother the sysadmins about.
Try this out: Cut and paste the following text and send the e-mail to yourself.
==== Begin SMTP Bug-test =====
.
This text should appear in the reply whether they have a bug or not.
But this text, however, will disappear if they have the bug.
==== End SMTP Bug-test =====
The problem is that putting a "." on a line all by itself is the way to tell an SMTP server that the message is done. That's what the RFC tells us. However, to prevent a line of your e-mail message from inadvertently terminating the message, good SMTP servers have various work arounds.
A test of their current systems reveals the following:
$ telnet smtp.ix.netcom.com 25
Trying 207.69.200.110...
Connected to smtp6.mindspring.com (207.69.200.110).
Escape character is '^]'.
220 smtp6.mindspring.com ESMTP Sendmail 8.9.3/8.8.5; Sat, 20 Jan 2001 17:23:45 -0500 (EST)
quit
221 smtp6.mindspring.com closing connection
Connection closed by foreign host.
So my bug is fixed. (However, 8.9.3 is not exactly the most secure SMTP server to use...)
Also, if anyone is using Earthlink, run nmap on your own box, then run nmap on another box you know is running SMTP services. Earthlink filters port 25! Some troll pointed out that it is their _right_ to do this, but my problem is that my mail was black-holed - not bounced back to me. If they are going to stop spam by filtering, then they should do it The Right Way.
Turambar
------------------------------
Common sense is not so common.
--Voltaire
Turambar
------------------------------
Common sense is not so common.
--Voltaire
Remember, when telling a story about how wonderful a company was to you ,to TELL US WHO IT WAS!!! That way we can support intelligence, instead of just punishing stupidity.
~ a low user id is no indication I have a clue what I'm talking about.
---------------------------------------
The art of flying is throwing yourself at the ground...
The bad news is that the @home NOC's mail is filtered, if it doesn't come from a very select list of people (their own L3 tech support, select NOCs that they have peering agreements with, etc) it is bit bucketed automatically. Here's the fast path route: call your local @home offering cable company, get in touch with *their* support group and make a friend, they in turn have a friend in the L3 support staff in @home, who can finally get the message to the NOC. Sad but true, you've got to follow the chain of command... but with any luck you can avoid the idiots that can't even spell IP let alone grok a routing table.
BellSouth's abuse@ reputation is terible... so yes, the hackers/spammers/etc like to buy their bandwidth there... the rest of the BellSouth user base is "guilty by association".
true, we are outnumbered, but there is nothing keeping the less technical from using the service if it proves superior.
I post links to stuff here
...because America's largest (sudo) ISP...
It took me a moment, but the word you're looking for there is pseudo, not "sudo".
I was trying to figure out what root permissions had to do with AOL, until I tried reading it aloud...
If you don't want to be contacted, there's nothing keeping you from filling your whois record with crap. For example, looking at my domain (which is virt-hosted now, but at one point occupied a nice little class C) you'll find that my telephone number is 555-1212. (That's a common information line) The email works, though I only check it every few months.
I used to have good information in there, but I found it was abused by all manner of advertisers and fifteen year-old geeks who thought they knew what they were talking about.
(I'm glad I no longer have a job where I'm responsible for The Internet.)
Your work should have a VPN to minimize sniffing of internal mail traffic sent by work-from-home people.
Likewise smtp.work.com shouldn't be relaying messages from random IPs just because the sender claims to be someguy@work.com. Otherwise smtp.work.com *will* become a spam server.
Limited Port 25 access is going to be a universal fact of life on the spam-filled Internet of the future, so everyone might as well get used to it. Most of this is due to the limitations of the SMTP protocol, so it only makes sense to layer other authentication mechinisms such as VPNs.
--
Business. Numbers. Money. People. Computer World.
According to http://www.isi.edu/in-notes/iana/assignments/port- numbers, SMTP runs on 25/TCP and 25/UDP. Although most traffic is on TCP, perhaps there's MTAs that would accept UDP.
--
Business. Numbers. Money. People. Computer World.
Sort of. They (hopefully) block mail sent to a domain from whom Earthlink does not provide mail services, if it is not sent from an Earthlink IP. In other words, they are not an open mail relay. This prevents some SPAM to non-Earthlink customers, and is a Good Thing.
They also block an Earthlink customer from connecting on TCP port 25 to anywhere except their mail servers, which will then legitimately relay that traffic. This annoys me, since it means I have to change configs when away from the office. It also prevents some SPAM, again to non-Earthlink customers. It would be nicer to only block large quantities of SMTP traffic, but harder.
What *really* burns me up about this is that despite the fact that exactly three people know my Earthlink address, I get huge amounts of SPAM there, *and* I can't use my Sendmail server to send my mail.
BTW, if they did what you said they did, no mail would ever get to Earthlink customers, except from Earthlink customers.
But then when you get back to the office, you have to change it back. It's a *nuisance*, for little perceived gain.
Well until the commercialization of the internet, this was not true. It was pretty easy before 1996 to call sprint's backbone NOC center and talk directly to a real network engineer. (Which I have done a few times).
But now that 90% of the internet is for Mom & Pop users - it is a deeper hassle to actually talk to the people that work.
Pan
I said no... but I missed and it came out yes.
How do they manage to keep track of the IPs used by major ISP's mail servers? Lucky guesses? Laborous investigation?
It strikes me as a somewhat dangerous technique. All Pac Bell needs to do is futz around with their email servers or net topology and *bang* a whole lot of PacBell email starts bouncing because the "anti-spam" provider isn't current on their configuration.
I can see the idea of a central registry of "official" email servers for a given netblock becoming popular; sites not in it can't send to registry users mail servers, and ISPs get another reason to price-tier their DSL service.
I can hear it now: "An SMTP server registry isn't available to consumer customers. It is available to our business grade customers, but that service starts at $99/mo.."
I was pleasantly surprised when I called @home on an outage issue and asked that they add a name to my account so she could also call in outages. The tech I talked to actually filled me in on some of the notes others had typed about me. I guess being understanding of their position helps (as opposed to ranting and raving about outages). I have fairly rapid access to tier 2 now (which I avoid using for simple things).
If you get to know the techs a little bit, and what they are and aren't allowed to do by the company, it can get you pretty far in getting the right level of support. Tier 1 wasn't even able (maybe just allowed) to do tracert from their systems. It wouldn't surprise me if tier 1 used checksheets and screenshots instead of actual computers if it wasn't for the record they have access to about me. (Perhaps they can't leave that particular application without getting in trouble.)
Digital Wokan
I wanted to spend 8 years defending the US constitution.
It depends on your state, in Utah, only one party has to know. Some companies have there one policy, but as far as State law only one has to know.
Sherm
Following Lisa's posting about "@Home blocking PORT 25" I would like to add that AOL does the same thing.
And good for them. AOL has been castigated for years as spammers used to grab a disposable AOL account, point to and open relay and spew until the plug got pulled. do {} while (1);
So AOL filters outgoing port 25. You were able to work around it by using a different port for your SMTP. Excellent. But don't criticize them for taking an action.
It's the tragedy of the commons.
I have discovered a truly marvelous sig, unfortunately the sig limit is too small to contain i
Earthlink does not offer SMTP connection services. They offer email through their arrays of mail servers. This is not censorship; it's just a decision about what mechanism they choose to offer.
now we need to go OSS in diesel cars
Actually, it's a GOOD way to get their attention. Since you can PROVE in court that their network architecture sucks, you can win. But you see, you let them sue you and THEN you get a lawyer contact their. Then you settle out of court, but now you have a contact ... "uh, we need to restore our slander against you, again, because your network is fucked up again ... fix it, again".
now we need to go OSS in diesel cars
A lot of places get blocked for being open spam relays. Anyone finding themselves blocked should make sure their own house is clean.
now we need to go OSS in diesel cars
The problem is, because the tech support guy you do get has read the first 3 chapters of the first book towards his MCSE, he thinks he has the Black Belt in networking. Unfortunately, you might not impress most of them (even if you know 1000 times as much as the sum total of them all ever could learn).
The other unfortunate reality is that most of these companies do NOT want geeks as customers; they use the bandwidth too heavily :-(
now we need to go OSS in diesel cars
Oh My God! That would mean we'd be back with an Internet the way it used to be about 10 years ago, with competent admins and engineers, and less crap and spam.
now we need to go OSS in diesel cars
Given that @Home mail servers are open relays (since I get spam relayed through some of them, I know at least some are open), and given the lag of delivery through them, maybe someone has discovered it as a temporary storage device.
now we need to go OSS in diesel cars
If the addresses are not listed in DUL then they may have blocked it on their own. I do that when I get spam that was relayed but not blocked by RBL/DUL/RSS. I check the ARIN records for the exact address the spam came from and I choose the most specific network involved. That gets blocked. However, it is still possible that spam was relayed from an address listed only with the broad SWIP record covering their whole network, even if they did put your addresses in at ARIN. If that is the case, you need to complain to them because their failure to SWIP **EVERYTHING** that might possibly relay or spew spam can end up affecting you even if they do SWIP yours. If they can't fix that policy then you need to run, not walk, to another ISP (and if you have a term agreement, pass it with a note to your lawyer that they are the ones to break the agreement for not providing proper service). If you tolerate bad ISPs, there will just be more bad ISPs.
now we need to go OSS in diesel cars
You mean for mail not addressed to any domain which Earthlink is the ISP for, right?
now we need to go OSS in diesel cars
BTW, I just realized that I have received relay spam from an Earthlink mail server at 207.217.121.12. That is one of yours, right? Did this one slip through your fingers? Did someone else set up that one? Was it hacked into? Did someone forget to test it against mail-abuse.org after making a config change? Why did no one respond to my spam abuse report?
Give you a call, eh? You post as Anonymous Coward and don't list your phone number? At least you can email me if you are geek enough to understand my email address.
now we need to go OSS in diesel cars
I've learned to NOT believe the obvious from so many people. I know what would be logically right. But so many people out there don't actually know, and just proceed on that basis. And then when you talk with them you're often not even talking the same issues. It's best to be 100% certain of what they are talking about and make NO assumptions about what they didn't actually say.
now we need to go OSS in diesel cars
I wonder what would be said if the routers were to simply redirect port 25 (for packets addressed to any IP other than the local mail servers) to the local mail servers. Regardless of where the mail is intended to go, regardless of how the sending server is configured, it always goes through the ISP's mail proxy server. There, appropriate checks and controls can be applied as the above article suggest. The question is, would all the complaints about broken mail be reduced because now people would no longer be so incovenienced as to have to set their "SMTP host" address according to their ISP instructions?
now we need to go OSS in diesel cars
Do you really think they are hiring for a position where someone will have the AUTHORITY to actually make the sweeping changes some people claim is needed? I personally don't know if AOL's network really sucks or not. I know a couple people whom I exchange email with that are on AOL, and it has worked OK. But if their network was fucked up as some people say, I'm assuming that it would take someone at the CTO level to fix it. Based on my experiences with other companies that do have networks in horrible or worse shape, anyone below CTO level just isn't going to have the AUTHORITY to get anything done, and won't even be listened to when they make the suggestions.
If I do appply for the CTO job at AOL, do you think they would even reply to my resume? Unless the job really is open, I highly doubt it. And even if it is open, I suspect they would be more looking for some politcal wonk than a guru geek who knows what to do to scale a network up to universal proportions reliably.
now we need to go OSS in diesel cars
That's fine. Make sure Pac Bell SWIPs your network. Make sure they SWIP every other network as well as dialup pools, so you network doesn't get blamed for spam. Or you can configure your mail server to just feed through the Pac Bell server. I find a less-mainstream ISP that doesn't seem to attract spammers.
now we need to go OSS in diesel cars
I've been majorly *UN*impressed by the competency at Verizon. If they are rejecting mail coming in to their servers from their own IP space based on the FROM: address, then obviously they are paranoid more about the forgery aspect of it. And clearly, as you've determined, they are unaware of the fact that people within their access IP space can have legitimate email addresses outside of their network, and need one way or another (SMTP through the Verizon server, or SMTP around it) to get out. They can't do both without breaking things. They will have to decide which way they want to block mail. The way of forcing everything through their own mail servers would MAJORLY reduce spam originating in their access IP space, but they apparently haven't been clued into that concept, yet.
Don't be glad they are not blocking port 25. Instead, be glad they are not blocking BOTH WAYS OUT at the same time. But you should be SAD they have chosen the one way which has virtually NO impact on spammers. The reason is, other networks will block the Verizon IP space when they start getting spam delivered from that spare.
As for the "pay phone" analogy, consider that their view of the Internet is probably more like a television broadcast than even a pay phone. Big corporations want to feed, and control, information going to you. Be glad you even get to send mail at all.
The contract thing may or may not help. They are probably reluctant to put it in because then they have to actually go enforce it, and they probably fear they can't be very successful at it. But I do agree that cancelling an account is pointless. Spammers know they can get 24 hours or so from an account, and more on weekends. They know accounts are sacrificial. That's why I don't focus on the disposable dialup accounts in my anti-spam measures. At least blocking outbound port 25 from dialups prevents the spam, which account cancelling after the fact never does.
now we need to go OSS in diesel cars
If they use a collection agency, they usually get nothing unless the agency collects. OTOH, if they sell the debt to a buyer of bad debts (usually pennies on the dollar) they get money up front, but usually way less. But I doubt anyone would buy these debts, as they are usually to ficticious people with stolen credit cards (which can reverse the debt back to the original owner anyway).
now we need to go OSS in diesel cars
Not all geeks do, and it is true that web sites are hitting up bandwidth providers for all customers more and more. But geeks do tend to stay online a lot longer, and download the latest FreeBSD, Linux, and MP3s. But perception plays a big role in this, too. The perception is probably more extreme than the reality.
now we need to go OSS in diesel cars
When I was working at this one small ISP (sysadmin, not tech support), there were a shortlist of customers that tech support was authorized to forward direct to me on just their asking. One of them happened to be a CCIE working for a major telco doing their internet routers. After that first conversation where I asked why he was using us (because he didn't trust his own employer's network WRT privacy) he was actually useful because he would pin down exactly where problems were before calling, and I knew I didn't have to do the trackdown myself.
But yes, you can get morons claiming to be gurus (because they installed a computer at work and it worked). I still think a direct line like that could be useful, but it should be given out sparingly, only when merited, and probably with some access code that could be revoked. OTOH, rot13 has been a reasonable filter, so far, on my email address.
now we need to go OSS in diesel cars
Asking people to turn off those filters and just accept being spammed as a result is not really practical, either. The RFCs don't actually mandate that everything has to be one big internet. It's not unlike any other firewall filtering where someone makes a policy decision about what they do or do not want to do, or offer to their customers, or support.
If blocking port 25 is brain dead (and I'm not really saying it isn't) then what is the alternative ..... that accomplishes as much spam reduction? Unfortunately, the design of the internet didn't really take into account the commercial proliferation we have today. We need some sort of secure mail transfer. Even with that, the problems won't go away. Even if we could authenticate exactly who sent every piece of mail at every hop with no chance of forgery, we'd still have the issue of having to decide who we want to accept mail from, and who we don't want to accept mail from. The concept of filtering is here to stay no matter what else we do.
now we need to go OSS in diesel cars
Blocking spam is an imperfect art. Yes, legitimate mail is going to be blocked in some cases. But choosing methods to block spam which provides at least a way for legitimate mail to be sent around the blockade is preferrable, because then the sender can at least do something about it.
People have suggested to me to use procmail to filter out spam. But when I prompt them for a good set of rules that work, so far 100% have balked, giving excuses like "every situation is different". I block dialups and relays not just to reduce spam to my mailbox, but to also reduce spam to the mailboxes of every customer. This in turn reduces complaints from customers. So far not a single customer has complained about losing legitimate mail, but I do have a means ready for any customer to opt out of the blockade and receive unblocked mail. It will be their choice, but they seem to be happy as is.
If you do fire a sysadmin for subscribing to the DUL, send them to me. If I have an opening, I might just hire them. Ultimately the decision to do any filtering on any basis whatsoever is a decision to be made by those with the authority in the business. But based on my experience, it is a wise decision to use DUL. But I would not use ORBS.
now we need to go OSS in diesel cars
There is some fallout blocking happening. You may be blocked as a result of someone else sending spam. Send me a private reply by email and tell me what IP your mail goes out from, and I can take a look and see what specifics I can discover. I am using RBL, DUL, RSS, and a blocking zone of my own. If you can get to me, then @Home is blocking on some other basis. But I can only guess without specifics (and may still only be able to guess then).
now we need to go OSS in diesel cars
No it doesn't take away the right to send email. It only NOT OFFERS the right to make SMTP connections. There's a difference. By blocking it, they force dialup/DSL/cable users to use the ISP SMTP server as first hop, where they can enforce (not all do, but at least they can) their no-spam policy.
now we need to go OSS in diesel cars
If Pacific Bell allowed the customers to connect port 25 directly, then it would create a massive headache, and high costs, for them to deal with the spam (and it would happen for certain, and probably has happened a lot in the past to get them to do this).
When you sign up for service, you are told what SMTP server to use for outgoing mail. Use it. Or find whatever other way works for you. But they are not offering SMTP connection services to you. The solutions are easy, so deal with it.
now we need to go OSS in diesel cars
Have you made certain that your network never has sent out spam (and I mean EVERY machine on your network) and they your domain is not in one of the domain based anti-spam zones? You say you are running Exchange. Since Exchange has installed with relaying on by default (at least when I last checked it about 6 months ago) you may have been a spam conduit in the past (if not still one now). Test every mail server by getting on the machine and running telnet to mail-abuse.org (standard telnet port 23) and having it check to make sure you are not an open relay.
now we need to go OSS in diesel cars
reply... "Midnight will be when NTP says it is."
now we need to go OSS in diesel cars
This doesn't even matter.
Let's say Earthlink would let you send through another ISP's mailserver. If the people running that ISP have a lick of sense, they aren't going to let Earthlink IPs send mail through their servers.
Any responsibly admin'ed ISP will only let people coming from their network send mail through their server. If more people were this responsible, we'd have a lot less spam.
Besides, why does it matter to you? Send the mail through Earthlink's SMTP server. It's still going to get to the same place, and you can still make the reply-to address whatever you want.
-Wintermute
It can be difficult to get problems fixed if a customer of Uunet doesn't open a ticket with them. Why not enlist the help of the target site and have them open a ticket?
Devout follower of The Ferengi Rules of Acquisition.
I don't want to use a @pacbell.net address. Period. ;) Neither do I feel like paying outrageous fees for a business-class DSL connection.
I have a Pacific Bell DSL line, running my own mail server with my own domain name (actually a subdomain of stanford.edu). The problem isn't on Pac Bell's side; my parents use Earthlink, and my email to them was bouncing. Some investigation showed that they had configured their mail servers to reject any mail traffic from Pac Bell IP addresses other than the Pac Bell mail servers. This was an explicit decision on their part, again with the motivation of "reducing spam."
Fortunately, I was able to relay my SMTP traffic through Stanford's mail server (since I'm using a valid *.stanford.edu address) for each set of mail destinations that does this access control.
I think it's pretty stupid to assume that a DSL line is going to be using the ISP's email services as well--- especially since Earthlink has no problem _delivering_ mail to that account.
__________________________________________________ ___
rooooar
@home's network is the single most shoddily run outfit out there (of this scale anyway). They have had ongoing routing and server problems since the day they started. I constantly have to deal with the fallout from users who think it is the ISP that I work for's fault that their @home destined messages cannot be delivered (when fact it is because the @home servers or network are screwed up yet again). Recently the routing issue has been so bad that almost every single @home user was unsubscribed from the mailing lists on our local listserver for being undeliverable. If you take a peek in Usenet you will see that this is affecting @home customer's across the board. Word has it that Rogers and Shaw (here in Canada) are near going postal over the lousy service @home provides and have plans to either take over the company or set up their own competing service. All I can say is that if you use a cable modem for speed, be smart and get an external mail provider if you at all care about reliable email (and Usenet for that matter).
All mail domains are obliged to have postmaster@domainname.whatever routed sensibly.
I would therefore send an email (from a different domain/SMTP server) to postmaster@home.com.
If they don't reply to that, or worse, it bounces, they probably don't have a mailman.
@home run RIP? or IGRP?
Amateurs!
If they're a real ISP they would be running OSPF & BGP.
just what is everyones problem?
And for your information, my CCNA is due to expire very soon. Which I would count as the opposite to "passing it recently".
blah blah blah...
Go to Hamburg, Duesseldorf, Frankfurt, Munich, London, Madrid and Paris and ask my users if our network works.
Moderators
Excuse me while I stoop to the newlevel of this post (No Score +1 Bonus off) so as not to disturb any self-respecting "Browse at 2" reader.
This post is not flamebait. If any ISP had less than 15 hops in their network then I would surely consider them amateurs. The whole reason to use OSPF and BGP is because of lower convergence rates. If changes in the network occured you would not be able to access the page you are looking at now unless you ran OSPF and BGP.
I have nothing more to say - except that I do not, personally, moderate topics that I know nothing about.
What the hell, I'm turning Score + Bonus back on because I feel idiots are moderating me down. It doesn't matter anyway as I seem to have karma to burn.
OSPF is explained in RFC1131, later replaced by OSPF V2 in RFC1247.
Explaining the internals of OSPF is beyond the scope of this forum.
You can, however, RTFM RFC1131 and RFC1247. These are in Postscript.
BGP is described in RFC1771
Now, listen up, go get a life!
At the time I was working for a web site, basicly, and the problem we were having is that @home customers in san francisco couldn't get to the site. After talking to a few of these customers, I had a couple do a traceroute to our server, and somewhere in the middle of @home's network a split horizon (i think that's what they are called) happened. It was where the packet just kept getting bounced between 2 of their routers back and forth until one of them finally dropped it. This only happened to traffic destined for our little network. I called @Home and was escalated to the top tech, who finally believed me. Then I was called back by a sysadmin there who required a lot of convincing. So he finally acknowledged the problem and said that they would get to it. Before I left that company I don't think it had been fixed, but it might have by now. It actually seems like it was a problem with their RIP or IGRP config, so maybe when a router was rebooted it would fix it's tables. Who knows. But the short of it is that I got ahold of a sysadmin and nothing was done. So good luck when you get that far. The journey may still not be over.
-Nicodemus
I just recently set up an exchange server on my dialup account (dont ask). After looking at tcpdump output I figured out that earthlink is blocking smtp from going anywhere except through there smtp server!
I have called and asked why i can not send through my server and the tech support and there supervisor say its a problem with the 5 servers i tried!
One of our customers runs a rather large mailing list... Many of the people on that list are *@home.com. The other day when they sent out a mailing, my mail server's queue filled up with 900 messages to home.com, just sitting there because home.com's mail servers wouldn't connect.
It's cleared up now, but trying to get someone over there on the phone ended up being a worthless task.
They block TCP Port 25, but they allow relaying through their mail servers for other domains IF you're part of their network. You can read about it at http://help.earthlink.net/port25. I'd bet that they are putting some form of blocking / throttling intelligence into their mail servers. Sure, you could do this in filters with a sophisticated enough firewall, but I'm not aware of any products that have that level of sophistication AND can handle the kind of traffic they do at a reasonable expense. Mail servers are designed to understand mail, so it's much easier to put the intelligence there.
...but from the other perspective. I use Southwestern Bell DSL, but I keep my primary e-mail with mailbank.com. Last weekend I kept noticing that I wasn't getting a successful connection to the mailbank.com address. After a few days, I finally did a traceroute to see what the issue was - same thing: routing loop. (not split horizion, and they're probably not using RIP or IGRP, but that's beside the point.)
The problem was that it was with SWBell's backbone provider. And, as it turns out, it was actually with SWB's provider's provider. I called tech support and attempted to be polite and explain the problem to the tech who picked up the phone. After getting the runaround, I quickly thanked her, and hung up. Then I called right back.
This time I immediately asked to speak to the second tier technician. When he asked why, I bowled him over with so much technical jargon and FUD ("This has the potential to be affecting thousands of users!") that he transferred me to a technician with their provider's tech support without another question.
Unfortunately, that guy only had slightly more of a clue than the first did. The problem arose when this guy didn't have another POC to pass it off to. He promised to bring it up with his supervisor as soon as he came in. (it was 7am) I thanked him for his troubles, and asked him to keep me posted on what happened.
Just yesterday he e-mailed me back - his supervisor said the problem wasn't with them, so to send it back to SWB. SWB determined that since I could reach their POP servers without trouble, it wasn't their responsbility.
(sigh) Luckily, someone at the backbone provider noticed, because it was fixed Wednesday sometime.
It would've been nice though, to simply be able to call them directly, and speak with someone who cared about and understood the terms 'routing loop'.
J.J.
Okay, first off, you're doing it wrong.
You need to call their NOC, *NOT* tech support. Get their NOC number, which is according to my records, 650-556-5599. If that's not the NOC, you can get the NOC number from them.
Once you get to the NOC, make them create a trouble ticket, and get ready to use your "I'm NOT HAPPY WITH YOU" techniques. The ONLY way anything will be done about it is if you ride them. Hard. They probably have the TT from Tech Support, so have that number ready, and give it to them. Start riding them hard. Demand supervisors, etcetera. Remember, the NOC is going to be setup with a front line defense (NOC techs), second line defense (NOC NetEng, NOC Unix Admin, etc), third line defense (NetEng, Unix Admins), and finally supervisors. That's NOT how it's managed, but how it's going to progress. Escalate often. Just keep calling them.
That's the only way I've ever gotten anything done with Crack-Home or any other moronic overly large ISP. If they're big enough to have a NOC, then rest assured you'll only get things done if it gets to the NOC. The NOC will likely scream at Tech Support if they get TT's from them (I know we did when I worked in one) and generally have a fit, and ignore the ticket as much as possible. NOC and Tech Support typically do not get along.
Hope this helps, and good luck.
your company here.
your company here.
shelby != ford
Since this seems to have turned into an @Home-bashing thread, I thought I would share a discussion I had with an @Home sales representative about a year ago.
I had been using my trusty old 90Mhz Pentium for the prior year and a half, without any major problems. I was one of the few subscribers in my neighborhood, which probably accounts for the lack of problems. So my lease came up on my apartment, so I deemed it time to move. I called @Home to coordinate the deactivation of my current account and the installation at my future location. The sales representative asked for my computer's specifications, and this is where the fecal matter hit the oscillating air movement device.
Upon learning that my computer was a Pentium 90, the sales representative promptly told me that they could not provide me with service, because they only supported computers with a Pentium 166 processor or above. When I asked why, I got the response, "I don't know why, I just sign up new accounts." I immediately asked to talk to the sales rep's supervisor. When he got on the line, I explained the situation to him, and asked why they could not set me up with an account. Here's the response I got: "Because the company wants to ensure that the service runs quickly; they don't want a browser running on a slow machine to lead someone to believe that the @Home service is slow."
I was absolutely blown away by this response. I asked the manager why it was impossible to sign me up for the service, given the fact that I had been using my slow computer with their service for the last TWO YEARS. He gave me a BS response about how he could get into trouble for signing me up for the service when I don't meet the requirements.
At this point, I was tired of dealing with these half-wits. So I hung up the phone, called back two minutes later, and told them I had a Pentium II. The tech came out a week or so later, and I said, "Don't touch my computer; I'll take care of everything." He acquiesced, and I used @Home with my Pentium 90 for the next couple of months or so.
So there's my story...I should say that despite the problems getting signed up, I haven't had any major problems with the service itself. I've had a few outages since I've been a subcriber, but not many more than my company suffered with their Pac Bell business DSL. I guess I'd rather have the higher max throughput than the increased reliability of a DSL line.
--= ThreeTee =--
I have one email address on my ISP's POP box, and another on my own mail server hooked to my DSL line. If I want to send mail, then using my ISP's SMTP server works great.
However, when my wife wants to use her email (at a university), then mail sent via my ISP's SMTP server is rejected. Why? Because they're doing really, really strict addressing rules. If it's not from ******@verizon.net (Verizon being my DSL ISP), then it gets rejected. So, thankfully, Verizon isn't [yet] blocking port 25, 'cause then my mail server would be worthless -- and my wife wouldn't be able to reply to any emails she receives.
Yeah, she could use the reply-to (which is what I do so I can use my @acm.org address), but that'd mean folks would often reply to the wrong address, or CC the wrong address, and that I'd have to pay Verizon for another email address.
As for @Home, I know around here that they scan for FTP, HTTP, and SMTP servers -- so you can't argue that it's an anti-spam campaign. Someone has decided that those are "commercial" activities, and that you thus must pay the extra $75/month (or whatever) for that priviledge.
Without the ability to run your own servers, then @Home (and others) are essentially putting pay phones in our houses. We pay for outgoing calls, but we are unable to receive telephone calls.
(And if that last part seems like a mystery to some folks, most of the pay phones I've seen won't accept incoming calls.)
The real thing @Home and other ISP's ought to do is put a simple clause in the contract. If you cause a problem, then @Home gets to bill you for the expense of causing that problem. If you send out a million spam messages, then @Home gets to bill you for all the effort it took to deal with that problem. Most ISPs just cancel your account. That's not a deterrent.
I'm serious. I've run into a situation several times before when pay phones wouldn't accept calls. Best example was near Butte, Montana, when I had car problems, and had to phone a friend. I gave them the pay phone number, and they said they'd call me back (they were coming to help). After an hour, I called back, collect (having blown all my quarters calling them), only to be told they had been trying and trying. They finally called the phone company, who matter-of-factly said, "yeah, none of our payphones accept incoming calls."
So, yeah, most pay phones accept incoming phone calls, but a few don't. Thankfully, I can afford a cell phone, and I now live in an area with cell service.
I mean, it's an unpaid bill. You then basically turn the whole thing over to a collection agency. Tell the agency they get half. The ISP then gets some money for its troubles, and someone else gets to be the pit bull. I mean, they already do that with some of the unpaid or underpaid bills.
So, when you're complaining about @home, BE SPECIFIC! What cable company are you complaining about?
--
Help us build a better map!
Currently working for a major provider (not AOL, I wouldn't sell out) in tech support, I have to say I get a lot of callers who say they've got an MCSE and a CS degree and they've been in the field for 20 years calling me that make most AOL users look like Linus Torvalds.
Best way to handle tech support is to tell them what you think the problem is, let them run through thier checklist so they can properly document the trouble ticket as required, and if you're cool and cooperative about it and try and be on the same level as the support geek, they'll escalate it for you.
To be honest, I love it when someone outside the Winmac realm calls, because they're almost always the easiest calls for me, ie they're the first to notice a widespread network outage and are very cooperative in giving me details I need to document while I run my tests and document that, it gets escalated to NOC and the problem's fixed by the end of the day, or they just had to reinstall thier OS and lost thier TCP/IP settings and all I have to do is read them off the user ticket...
One problem that slows down reporting of network issues a lot are technically illiterate people who get mad because they can't check thier email right now and won't cooperate with us making sure they're set up right or variations on that theme.
--
Help us build a better map!
There are two classes of Internet sites, for mail and for everything else: those that are run by clueful and caring people and those that aren't. Hotmail, Collegeclub, and NetForward all fairly recently pulled this crap on me, and what little tech support I could reach was provided by utter morons who don't know what "Connection Refused" means and refused to escalate.
I'm not paid to make mail work. Dealing with idiots and assholes is Not My Problem. Just this morning I issued a full-scale rant on this subject to my users, and then chopped all the broken email addresses from all my mailing lists. I simply no longer give a damn about sites that are not run by people I know and respect in person or by reputation, and that's that. I give mailboxes on my machines away freely to friends and acquaintances, and I talk to other mail admins and try to make things work, but if a site gives me the big fuck-you, it stops being my problem immediately and forever.
I encourage everyone to adopt this solution. There will then effectively be two mail networks: one that's run by people who suck, and the other that's not, and I will be totally happy not getting mail from the former.
IAANAL, but my understanding is that federal law (which would apply when dealing with a company outside of your state) requires that only ONE of the parties on the call know it is being recorded.
For some states (California for one), BOTH parties must be aware it is being recorded *OR* the recording device must beep every 15 seconds.
Try just doing a whois on the domain name then call the adminsitrative contact. Ive done that a few times, and either its the correct people (NOC) or they transfer you to them. Saves me alot of time going through tech support.
Earthlink/Mindspring has been doing that for months
@Home is still using that idiotic setup. They have improved a bit though. I've gone from regularly receiving @Home mail a month late to receiving it only a day or three late. They keep apologizing, but never seem to actually do anything to resolve the problem. Then there's the fact that their mailservers are only intermittently available in my area anyhow.
These days, I try to bypass their servers whenever possible, and just use the sendmail setup on my box. Saves me migraines (and clients).
--
Let's switch this a bit. Give me an example of when legit mail should come from a host that could be in the DUL. Let's say you want to use Pine on your Linux box to send me a message. Ok, no problem. Configure Sendmail to direct all non-local SMTP traffic to your ISP's SMTP server. problem solved. Too much hassle? You use you Linux laptop at different locations on differnet networks? Convince your ISP to utilize POP-before-auth. The only other solution is to use an SMTP server that accepts traffic from your current location. If we didn't use lists such as DUL, than how else would we filter out all the non-legit e-mail (spam) that comes from those neworks, like uu.net and popsite.net? Well, in short, we can't unless we filter by content of messages. Now if you want to rant about accidentally deleting legit mail... You're fighting the wrong battle. Join akt.comp.sendmail or read the sendmail FAQs. It's enlightening.
--
Here is the gest of a call I once had with @home tech support
support: Thank for calling @home tech suport, how can I help you?
me: Are you guys having a problem with your IRC sever?
support: I don't know, what is the address your trying to get to?
me: irc.home.com
support: Your typing irc.home.com in your web browser, let me try?
me: Do you know what IRC is?
support: Oh I'm sorry, you mean the little flower down in the corner by your clock?
me: Can I be passed up to "Level 2"?
support: I can't do that, and we don't support IRC?
me: IRC is not the flower, in the corner it's YOUR chat server.
suport: Can you hold?
me: ON HOLD ALREADY ok
support: (new guy Level two I think) Hi this is XXX what seem to be the problem.
me: your IRC server is down
support: We don't have an IRC server
me: irc.home.com, if it were up you could ping it.
support: That must be some one running an unauthroized server, we'll report them to the abuse depart me.
me:
When you sign up for service, you are told what SMTP server to use for outgoing mail. Use it. Or find whatever other way works for you. But they are not offering SMTP connection services to you. The solutions are easy, so deal with it.
I am a telocity customer. Their smtp worked for a while, but when they upgraded their mail servers I started getting "relaying denied" messages as the mail header information pointed to a domain that I host on my line. Until December it appears that the server was just concerned with my being on their network, but now they don't want the headers forged so I have to go back to using my own smtp daemon. So far I don't know of any mail that was blocked, but I am worried that something like MAPS DUL will start to list DSL blocks in the future.
... and I used to be that user. In addition to *daily* outages, I could never get to speak to anybody in their customer service. I mean, I could, but... well, when I call to complain that I am getting >60% packet loss on my pings to *any* other server in the world, they would ask if I remembered to plug in power to the cable modem, and if I had an ethernet card in my computer! Duh! Wouldn't I have a 100% loss if I had no power or no ethernet card? After explaining that to them, they would tell me that they are aware of the fact that they have problems and they are working on resolving them as quickly as possible and apologize for inconvenience! They kept resolving them for over a year when I was their customer, and finally, when they tried to switch me from static IPs to DHCP (because, it was just newer and simply better) and changed their TOS, effectively putting me in violation of it without bothering to notify me about that - I found that out on slashdot!!! - after that I called it quits. Man, speakeasy is better!
- -----
P.S. Considering the amount of @home stupidities exposed here, this deserves a +5 at least!
:)
-------------------------------------------
Jobs? Which jobs?
You mean for mail not addressed to any domain which Earthlink is the ISP for, right?
From the context I believe he did mean "ANYONE trying to sendmail directly to their mail servers from a NON earthlink ip address".
They don't give a shit about anybody who isn't giving them money. Can you say "net fragmentation"? I knew you could.
Right. Except that I live in a dorm which gives me a "free for life" email, and slow (sometimes 200 bps (not kbps) access). I have a cable modem. But I can't access my account from outside their net. I switch cables...i can access my campus email, but I can't use my "real" account. If i register at a site and recieve a password in the mail, then i have to reply from the same site that recieved the email or they just resend it. It sucks.
...because it's a lot easier that trying to get anything useful out of @home. I've been an @home user for three years now and I can honestly say that if it weren't for the fact that I can't get high speed internet access from a competitor, I would be switching.
I think part of your problem might be that the tech support staff are also kept in the dark. They can't help you if they aren't informed themselves. Maybe there's an @home techie out there who can answer this?
I do tech support for another major ISP in this area and I am proud to say that our users don't suffer from this same problem.
@home was in my blacklist. Three of their mail servers were pounding one of my servers numerous times a second attempting to relay mail through the server. I tried every conventional (old school, so-to-speak; email the postmaster, or sysadm) method of contacting them to no avail. I tried calling and emailing abuse@home.com - nothing. It left me with the impression that the fucking bastards felt they were so big that they didn't give a shit whether they were a responsible member of the Internet community. So I blacklisted the entire domain until the relay attempts trickled down, then stopped, which was for months. Fuck You @Home!
satire, n: 1) witty language used to convey insults or scorn; 2) a form of humor lost on most slashdot moderators.
Keywords might include:
Since Earthlink went to port 25 blocking (actually, dialsprint.net leased to Earthlink customers), that's now 90% UUNET.
I'm positive that the majority of abuse mail is piped to /dev/null
For UUNET, I'd agree - they're wholly nonresponsive and deserve to be blocked.
But I'll vouch for Dialsprint. It took a few months, but I did get a human response from one of the Dialsprint abuse staff. Of course, it was two days before they implemented port 25 blocking, so it was kind of a moot point, as spam from Dialsprint/Earthlink dropped from 30% of my spamload to "noise level" within a week of it.
MAPS DUL rocks, but I'd like to see uu.net RBL'd.
The main problem with that is that they don't have an "actionable" RBL nom for uu.net. I've got dozens of Telodigm (linkusnow.net and friends) spams and hundreds of UUNET ignorebot tickets. All I have to do is make the phone call. Sigh. Fuck Qwest for hosting Telodigm, and fuck UUNET for... well, being the world's biggest spamhaus.
But the day UUNET blocks port 25 for its resellers (which I fear will require a full RBL of every netblock they own, with associated collateral damage) is the day we win a major battle in the spam wars. They're the only big dialup provider left.
Remember what happens to users who call the BOFH?
@home and several very large ISP's have some serious problems with spam. Every day the problem increases and more and more third party measures are coming into place to block such disasters. Take a look at mail-abuse.org (works beautifullly btw) or perhaps the orbs system.
Large ISPs are looking for a way to curb their outgoing spam and keep the risk of being blackholes to a minimum.
This large DSL provider who is complaining his customers cannot connect to @homes customers on port 25 is not giving you the whole picture. @home does indeed have a large number of customers who have pretty much open mail servers that allow relaying. Be it old versions of sendmail or simply bad configurations... it is truely a problem.
Also note, port 25 blocking is also outbound for @home customs as well. The way port 25 blocking normally works, is you have a set of hosts the customers are free to communicate on. It is normally not difficult to get a mail server on such a list.
This method prevents their customers being the victim of a fault configuration/software issue or causing such a problem by directly sending large amount of bulk spam to other isp's mail servers.
You can bet other providers are preparing to institute such methods in the future.
A violation of rights... I think not.. at worst... a nuissance for the customer at times. The pros do however, far outway the cons.
"You should always go to other people's funerals; otherwise, they won't come to yours." -- Yogi Berra
The idea that customers can simply call up and get a systems administration or network engineer is a little odd.
;).
If this were easily done, the people trying to do their jobs, could no longer do their jobs. Often customers want to talk to "the person in charge" for nearly any issue. A good deal of the time, it is not an issue that needs escalated to the NOC.
What happens within large ISP's, frontline support needs to recognize there is an issue. This really won't happen until support starts noticing a pattern or consistancy. When they reach the point when it appears not to be a customer problem, but possibly a system problem... then it is escalated to the NOC.
Unfortunately, in every industry you will find people who really don't know all that much. A clueless operator or salesperson... or perhaps your brother
Often, it helps to explain the problem in detail, making sure the representative understands the problem.
"You should always go to other people's funerals; otherwise, they won't come to yours." -- Yogi Berra
Forgive me, /.ers, but what exactly is a Troll besides some regular fuckup? (And yes, I did follow the link, unfortunately. I am not amused. The AnonCow seems like he might be some tech-fool from one of the ISPs we're talking about. Eh?)
Thanks
I know this probably seems obvious, but if you guys think it's hard to contact some semblance of Authority on @home or other "large" ISPs, You've never tried to get an answer on an AOL problem. Hours spent on hold and hundreds of automated replies spring to mind...
Sorry to hear about the problem, but it could be worse.
Heh.
Exactly why people are speaking out against blocking port 25. It takes away their right to use other e-mail providers
If you would be a busy admin you would think different.The worst spammer always seem to be UUNET customer by the way.
Some times ago I was asked to make relaying possible for the big boss, who wanted to get/send his mail through the Internet with his normal account. Nice, if you get only a few hours to get it working (So don't complain I could have made it much better/more secure, I know, but I had no time). I first thought, don't muck up with the sendmail.cf of the primary mailserver, so I choose another machine, compiled POP3 with APOP support and created a new sendmail.cf with m4 and this nice POP_before_SMTP hack, opened at least the firewall 25/110 for this machine, I could only test it twice, but it worked...:-)
Next day I had to regocnize that my server would not just relay for the one who was allowed, no I had one of those UUNET spammers who may have scanned our network just after I opened the firewall, the only good things was, I had this access.db feature build in and blocked the whole UUNET, something like 63.48 and after 50 times changing his IP, it even looked sometimes in the logs as if he would use a script, he finally gave up as everything was rejected...you know this:
550 We don't accept mail from spammers...
With some help of the sendmail newsgroup I could get it setup right/secure, but I had to wait until my boss came back. This way I had some difficult weeks, always looking at the logs and hopping this small bastard or someone else wouldn't try it from a different side than UUNET.
I can only tell you if you would have gone through all those spam problems, where you sometimes can't do anything, cause the spammer is using some open relays on the other side of this planet, you would say that blocking port 25 for dialup users is a good thing, they can use there own ISPs mailserver, as somebody else pointed out!
If someone needs this feature, he should pay a few bucks more, in order to give ISPs the money to control those say "special accounts" that are allowed to transmit on port 25, sure signning up for such an account should be a bit harder, but those who really need it (and don't abuse), would get it.
The only good about that story: I learnd much more about sendmail...:-)
Michael
Configure an IP alias on your mailserver and add a route to your table that routes mail to thier servers thru the aliases that are hopefully IP#'s they aren't filtering.
@home sucks anyway. It's really the price their subscribers have to pay for being their customers. Kind of like MS sucks, so why do you keep using their crap?
Imagine there were an address like sysadmin@home.com. It would get literally flooded with zillions of emails of users not being able to read their mail or to access their favorite prOn site.
... But of course, theatre courses might be more efficient then CS here :)
My own humble experience at contacting network sysadmins (with some real reason) is that
first, you don't get through, then you don't get through, then if you eventually get through, the sysop will usually start by assuming you're just another dumbass. Finally, if you are lucky enough to reach him to make your point, then you might get an answer. At least in my case, when I (finally) managed to obtain the "private" email of the sysop and carefully explained the routing problem I had thought their network, I received a nice reply (and the problem was fixed) in a matter of minutes!
So, do your best at explaining that your problem is REAL and that you know what you are talking about
I had an interesting problem recently. I tried to view the article at aspalliance.com that was linked from a story last week, and I couldn't get the page to come up. A little sleuthing showed that a router at bbnplanet.net was blocking all traffic to that particular IP address, and sending back "packet filtered" icmp messages.
I'm on @Home, and bbnplanet just happened to be the link between my network and aspalliance.com. I called bbnplanet's customer help line at about 2:30 in the afternoon, and was told that they were aware of the problem and working on it. Around 10PM, still couldn't get in, so I called again and was asked to email them a traceroute. I emailed a traceroute from two completely different networks that both stopped at the same router.
Now, here's the funny part. The customer support person emailed me back that the problem was apparently that aspalliance.com had an outstanding bill at network solutions, and she showed me how to view that. What irony! I responded with a scathing letter explaining that since I had the IP address of aspalliance.com, network solutions, and dns, was irrelevant. I then called again, and she was pissed off.
She told me to wait a minute, then came back and explained that I would have to call aspalliance's ISP to find out why bbnplanet was blocking them. Ah, so we admit that we're blocking them? No, she couldn't tell me if they were blocking it, only that I would have to call this other company. I asked "So you know that you're blocking them?" Her response: "Sir, we know everything that we're blocking." My response: "Aren't you the one who just sent me an email claiming that this was over an unpaid network solutions bill?" She didn't have an answer for that, and finally hung up.
Concerned that aspalliance.com might be running an ORS known to spammers, I called the other ISP the next day to warn them. They had no idea why bbnplanet was blocking that host, of course.
Anyway, it's amazing how difficult it is to get in touch with people at these large companies. I had to call dbn.net over a bad router a few weeks ago that was keeping me from getting to my machine in the colo facility. The front-line guy wouldn't talk to me because I "wasn't their customer", yet they were one of three networks that I traversed to reach my destination. I was a customer of a customer of a customer. How in the hell am I going to get @Home to fix that, and how long would that take? It's messed up.
Michael
Do you have ESP?
A supervisor? DId you miss the article from a little over a month ago, where "Elevating to a Supervisor" consists of "Transferring to a Coworker" according to offical company policy at some places? I haven't worked at a tech-support center, but I have worked in a more general call center, and it was similarly disorganized and problematic, largely due to problems beyond the control of those in the actual call center.
I've been dealing with @Home tech-support for a couple of years now, and I've found the best way to get them to move is to threaten them with antitrust action. They have an interesting market position since in many areas they are the only company providing such a high-end service for such an affordable price. It's my opinion that they know this and are taking advantage of it to slack off.
Here are just a few things that I've seen from them:
- No backup power on their infrastructure (routers/switches/hubs)
- Regular failures of their internal core routers
- Regular failures of their mail servers
- 64-KB limit on outgoing email attachments (which they claim doesn't exist)
- Magic terms-of-service (now you see them, now you don't, now you see them again,
...)
Back when I was an @Home customer I went as far as to track and log some of the above mentioned failures. I found on average they happened 2 to 3 times per day. I've never seen a major ISP have such critical issues so frequently. To me, this is a sign of incompetence.Not accepting email from dynamic IP pools may break the "spirit of Internet cooperation", but I think that spirit got broken by the spammers.
Fact is that nearly all spam comes either through open relays or direct from dialups with dynamic IPs. You can't block a spammer who is using a dynamic IP. If you block their IP, they can just change it and start hitting your server again moments later. A solution to that is to block all the dynamic IPs.
If you want to run a mail server, get a static IP so people know where you are.
Michael
I feel your pain. I too have had huge problems with ISPs either not believing me or not listening to reason. I spent 7 hours (at least) on the phone with Earthlink (7 hours is much less than it takes to get another DSL provider) trying to fix a problem with their PPP servers. I was doing protocol analysis so I was *certain* what the problem was. The bad thing is that it was *very* technically complicated and not on one of their check sheets for their techs.
:)
The point is that there is nothing we can do about this. I am sure there are a lot of *really* smart people here. The problem is that tech support people have to deal with a lot of Microsoft Morons so they just assume we are in the same category.
What is really needed is a way for a geek to say "I have mad Kung Fu and have a Black Belt in Network Engineering" and they would say... "oh... excuse me... I will connect you to our third tier tech support right now". Of course that is not realistic. But what they could do is keep track of people with mad Kung Fu so they can go right through the line.
If an ISP would do this it would SERIOUSLY increase their business. All the geeks would subscribe to their services because they don't want to deal with other ISPs. It would also increase their reliability because they would have *really* smart people fixing their network problems for free! Open Source ISP!
Somehow that is logical so I assume it will never happen. God forbid any Western country undertand Zen philosophy!
I've had this problem with Adelphia as well. Their support monkies form a wall that's very hard to get through. It's especially difficult since when you find someone who actually seems to know what they're doing, your replies go back into a 'support pool', not back to the person who originally replied to your message. I assume that the network admins have thier own email addresses like ts-jdoe@home.com. I believe your best chance would be to directly contact a known sysadmin through telephone or email.
You can blame your fellow Internet users who spam for this. Its another case of having to create policies that prevent everyone from doing something so a few 'bad apples' can be stopped. If there weren't EarthLink users who used other smtp servers as spam relays, then this policy wouldn't be needed. Look at the laws in any city/state/country and you see the same thing. Unfortunate-- yes, but censorship-- no. Your ISP isn't a public facility-- they have investors to answer to and if their bandwidth is being used for impropper purposes (like spam) that violate their AUP, its their right/necessity to stop that from happening.
Fully licensed blockchain psychiatrist
Maybe I'm not understanding things here, but why would you NEED to send mail through your work.com smtp server?
You can still send mail *from* your work account by using your work email address as the "from" address and still use your ISP's smtp server. I've never seen a situation where your mail would need to come from one particular smtp server over another. Now just because I've never seen it doesn't mean its not worth doing, but I'm interested to hear why you can't just use your ISP's mail server for all outgoing mail.
If you have a desperate need to use your company's mail server, you can always use a VPN and tunnel smtp traffic.
Fully licensed blockchain psychiatrist
Um...... no, this is not the same thing.
The original poster stated that her company's smtp servers were/are blocked by @home's smtp servers. Earthlink is not doing this-- they are not allowing users dialed into them to use someone ELSE's smtp servers directly; the users must instead use EarthLink's smtp servers to send mail. Why this bothers people still manages to stump me-- IT DOESN'T MATTER WHO'S SMTP SERVER YOU USE TO SEND MAIL. It will all get to the same place regardless. The reason that EarthLink chose to do this was simple, to prevent people using their dualup lines from spamming via someone else's poorly-configured smtp server. It really amazes me how some technically-sound decisions made by a company are twisted into bloddy-murder when people who don't know what they are talking about gripe about free speech this or censorship that. This is nothing to do with censorship and its not at all the same as the original poster's problem, which is a legitimate gripe.
Fully licensed blockchain psychiatrist
These clowns block port 27015 after they deem you have played your fair share of halflife.
Who do they think they are, my mother?
depending on your jurisdiction, the above advice may be illegal. Think Linda Tripp. She just barely avoided going to jail for recording conversations with Monica Lewinsky when only she (Tripp) knew about them.
Check with a bonafide attorney as to what is legal or not.
DB
One thing that I've had work a high percentage of times is to call in (the third or fourth time I've already had the runaround) and when I get a human being, simply request to see their supervisor. When they start stammering and wondering what kind of nutcase they are dealing with, explain that they have nothing to worry about but you have been routed to several dead ends already and are just not going to discuss the problem with a level that has already admitted your problem is not solveable by them.
Repeat until it doesn't work. Then explain what the situation is. When I use this technique I often get one or two levels up in 5-10 minutes and my successful resolution percentage goes way above 50%
DB
They wern't accepting mail from ONE of my IP's (out of many) either. I got through very quickly and easily. There is trick, but I have this nasty feeling if I say what it is it won't work any more. :-(
Need Mercedes parts ?
I used to work for a portion of @home (now AT&T, formerly TCI) If I remember correctly, they have a very odd 3 tiered mail scheme, there are only a few mail servers available from the outside, after that the mail gets filtered down through 2 internal mail hosts before finally arriving at the mail host that the user actually checked, this caused us huge problems with messages sometimes taking days to be delievered. I wonder, are the mail servers you're trying to access actually the ones available to the outside. I've seen the monumental screw ups @home can make. All the information I received as a lowly tech was filtered and stupified by management, so I don't know to much about behind the scenes. I believe they are located in Redwood City, you might try the phone book.
Get involved
It's the 21st Century Do you know what your government is doing
When I worked there, the relationship between the actual people was good, the problem was management. They always got pissed off and I almost got written up for directly calling the NOC, rather than having my manager call thier manager.
Get involved
It's the 21st Century Do you know what your government is doing
I use Netcom for most of my dialup, since they still have unlimited dialing for $19.95 per month,
as opposed to most other companies that charge per hour after some limit like 20 or 100 hours. They're not who I use for my shell account, or web page, or incoming email, or outgoing email - I'm very happy with idiom.com , and sometimes I'll use my company-provided dialup instead of Netcom. The Real Netcom dial pops let me connect to Port 25 at my ISP, where I'm recognized as a customer and can send email. But the Mindspring-flavored Netcom dialups don't - the connection just hangs unless I'm using one of Netcom's email relays. Yes, I realize this blocks many spammers. But it also blocks many legitimate users, particularly of Unix systems.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
Furthermore, even using a Eudora client-oriented mail system, I don't want to have to reconfigure my client every time I dial in from somewhere different (e.g. take the laptop from home to the office or plug it into the DSL in the lab or a customer's LAN) - I should be able to send directly. If each ISP blocked port 25 except through its servers, laptops would be much lamer.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
I work as a sysadmin in the NOC of a large very well known regional ISP. The only people who have the number to our NOC are the people above us and the managers of the front line support. Customers and the general public are not allowed to call us and I think it's a good thing. I saw a reply above that linked to a list of NOC phone numbers and checked it to make sure that my company wasn't on the list. Face it, if you were bombarded 24/7 by geeks who felt that their problem deserved your full undevided attention you wouldn't get much real work done (face it, there are people who feel that if their insignificant problem doesn't get fixed this second the world will collapse and anarchy will reign).
For the problem that was listed at the top of this thread, I would suggest contacting the abuse@ email address for the domain in question. I do know that our company's email admins do get those messages as well as a few higher-ups. Other than that, route your mail thru your isp's SMTP server and save all of us headaches.
I can understand why @Home would have several levels of countermeasures in place to reduce spam and server services deployed by consumers. Perhaps it was broken and they've got this fixed, but, sending from a registered domain with dns set up, it accepted the mail in 2 seconds:
Jan 20 13:24:49 myserver sendmail[18858]: f0KKOlM18856: to=, ctladdr= (1000/0), delay=00:00:02, xdelay=00:00:01, mailer=esmtp, pri=30587, relay=mx-rr.home.com. [24.0.95.23], dsn=2.0.0, stat=Sent (f0KKOvm16871 Message accepted for delivery)
Linux rocks!!! www.dedserius.com
www.dedserius.com
VB != VisualBasic
Short and sweet: do a WHOIS on the domain and contact the technical contact.
From my experience if they do not have a hand in the administration of the provider you are trying to contact -- you can be certain they have the direct telephone number of someone who does ...
Get off my virtual lawn, you damned virtual kids!
Yep, Earthlink's a port blocker. I travel to every nook and cranny of the USA on business during the year, so if I don't want to use AOL, Earthlink is about the only other viable choice. They are very good in so many ways, but I don't like this particular form of censorship of my legitimate use of their network.
I don't know why the hell you think YOU'RE so special. Half the time @home doesn't even let their OWN CUSTOMERS contact their mail servers! 8-)
Working for an ISP that uses UUNet for our provider I've had to call them a few times when we've had problems. Sometimes you just have to simply hang up and call back and hope to get a different person. Many times people just don't care or don't want to listen to what your saying. In this case I would suggest trying to find a Tier 1 person who is willing to work with you. When I discovered that one of @Home's routers (the one I was on)was dropping packets I called them and got a great tech support guy. He had me mail him some trace routes and some pings and then had the problem fixed within an hour. On the other hand I've spent 3 hours trying to get them to admit that their DNS or DHCP servers were down. Sometimes you just get lucky..
Wouldn't an email to [postmaster|hostmaster|noc|admin|root]@home.com
from any account at another ISP who isn't filtered by @home solve this problem rather easily...?
I'm sure any admin usually has multiple accounts all over the place.
"Customer facing" is an industry-standard term. Everything is either customer-facing or non-customer-facing. A development server that is firewalled from the outside world is non-customer-facing. So is the sysadmin that runs it. You don't route calls to sysadmins. They are the (ostensibly) bright people on whom you rely to keep the show running. Encouraging them all to quit by forcing them to deal with cluebies *AND* do a full-time SA job is a great way to have them all say "Fuck you", quit, and then you have to re-hire them as "contractors" for 2x the wage you were paying them before because they're the only ones who know enough about the infrastructure to keep it alive.
Monty Python NOT FUNNY? wtf?
you go to hell! you go to hell and you die!
Voting Moo Anyway!
That CC: should include marketing department, CEO, CTO, webmaster, sales, WHOIS name registrants, security/abuse contacts, and whoever else you can find on their web page. At least this way you have a higher chance that someone will see the thread that will push it to a higher priority. Again this should probably only be done after you have exhausted the primary support channels to no avail.
@Home: "Oiga, senor, we are an ISP. You know, the broadband regime."
Customer: "If you're the ISP, where are your network admins?"
@Home: "Network admins? We ain't got no network admins! We don't need no network admins! I don't have to show you any steenking network admins!"
Windows is going the way of phlogiston...
If you don't have this list already, you don't need it.
,cowboys and goths you do not wanna meet, much less piss off.
It is a necessary tool for NOC admins and if you screw it up.... You obviously do not know those of us on the damn list. A scarier bunch of libertarians
*"Cogito Ergo Liberalis"*
Kiewlich, Daniel (DKF336) abuse@HOME.COM
@Home Network
425 Broadway St
Redwood City, CA 94063 US
650-556-5399 650-556-6666
I doubt that you'll get much value from the abuse@home.com address, but you may be able to find a useful path at the phone numbers.
Billing Contact:
Du, Trung (TD2157) trung@CORP.HOME.NET
@Home Network
425 Broadway Street
Redwood City, CA 94063-3126
650-569-5437 (FAX) 650-569-5100
Going through the accounting department may not be as bad an idea as it looks like on first glance. Everybody talks to accounting. They should be able to point you to someone in Networking with purchasing authority. That's also someone who can pull strings to get things done.
If you're not a good people person, you may want to find a techie who is. This path is probably going to take a little bit of schmoosing.
Just because the front door's the only obvious way in, doesn't mean it's the only way in.
`ø,,ø!
Free Software: Like love, it grows best when given away.
Registrant:
Home Network (HOME5-DOM)
425 Broadway St.
Redwood City, CA 94063 US
Domain Name: HOME.NET
Administrative Contact, Technical Contact:
Kiewlich, Daniel (DKF336) abuse@HOME.COM
@Home Network
425 Broadway St
Redwood City, CA 94063 US
650-556-5399 650-556-6666
Billing Contact:
Du, Trung (TD2157) trung@CORP.HOME.NET
@Home Network
425 Broadway Street
Redwood City, CA 94063-3126
650-569-5437 (FAX) 650-569-5100
Record last updated on 14-Dec-2000.
Record expires on 19-May-2006.
Record created on 18-May-1995.
Database last updated on 20-Jan-2001 06:23:11 EST.
Domain servers in listed order:
NS1.HOME.NET 24.0.0.27
NS2.HOME.NET 24.2.0.27
Subject: free o'reilly books
Fix port 25, Uncle Fuckers!
.
$ ^D
All generalizations are false.
--
I like to watch.
All generalizations are false.
--
I like to watch.
I CANNOT BELIEVE MY FELLOW GEEKS ARE OUT OF THEIR MINDS!!!
Call the NOC, the sysadmins or network admins of a major ISP for a firewall change?!?!?! Are you OUT OF YOUR MINDS?!?!?
"Hello, are you the Sr. Network Admin for @Home"?
"Uh...yes?"
"Can you please open up port 25 so people outside your network can send email to your mail servers?"
"Oh sure, we take firewall change requests over the phone from strangers outside our network all the time. We don't even bother putting in change control, or discussing it with our manager. Afterall, our manager and his directors and the CEO don't care about all our millions of dollars of firewalls and security systems. We don't have any corporate policies or security procedures. This means we here at the NOC can do anything we want. I'll open up that port for you in a jiffy."
"Wow great! I'll you call back for more network change requests!"
"Great idea! Be sure to write down our number. We love answering calls from strangers, as well as users in our own company. Admins like us love helping users. Its been a pleasure serving you. Is there anything else my team of overworked network admins, sysadmins, and security experts can do for you?"
If you believe that the above scenario has any basis in reality, perhaps you deserve to find a sysadmin or network admin somewhere. He or she, after hearing what you have to say, will most likely take a shotgun and blow your brains out.
I once had @Home call me up and tell me that I was running an "illegal" FTP server, which was true. The funny thing about it was that he was looking at someone else's ip address. The illegal ftp server he was talking about was not mine.
My girlfriend's ISP through her cable network just switched from ISPchannel to @home, but is handing her email services off to mail.com. SHe's already got an inbox full of spam from those piggys!
blessings,
"Only in their dreams can men truly be free 'twas always thus, and always thus will be."
--Tom Schulman
i work for an isp that resells several nationwide networks. most big networks, such as uunet, psi, c&w, etc all block port 25 traffic to all but allowed hosts. on uunet, we can unblock 25 traffic by sending radius attributes. but, in general, people who use our dialup service and need to send mail through their third party web hosting or mail hosting providers need to simply use our mail servers for outgoing. i recommend you tell your users to simply plug in mail.home.com, or whatever it is, as their outgoing mail server. all in all, this is less of a problem and more of a security issue.
I think I like the fact that @home is blocking your B.O. port.
Find a new trojan, B.O. is dated, easy to track, and juvenile.
Any other ports it is blocking...? Don't know, keep downloading new trojans till you find one that works and post your results.
Don't like my response? Flame me at $user@localhost
umm...DOS attack. Sounds like Account cancellation time. Contact offending IP's NOC, kick Cluser off line, change password, Flag for Network unfriendly activity, attach relevant portioin of logs, send to abuse departments, revel in your policy of charging Cluser actual money for clean up costs. Gives me a warm fuzzy feeling, just thinking about it. Too bad we legally cannot do more to these PFY's.
"Part of the problem is that the reasons behind are not being communicated very well."
True. Explaining the Technical and political reasons behind something like Port blocking can be a time consuming and often fustrating undertaking for those who understand it. Trying to get anyone to understand that the internet is not just how they percieve it, but a much larger symbiotic relationship with the electronic world at large, is akin to forcing an apiphiny upon a pre-teen.
"Some t/s personnel do not fully understand port 25 blocking/ip filtering,and/or may not be able to explain it sufficently to someone with a non-technical backround"
Also True. Most of the TS staff of an ISP has not worked there longer than 6 months (8 months is the average burnout cycle) and is still viewing large networks with a sense of awe. They do not know alot about basic networking and are not trained on it. What they are trained on is basic windows troubleshooting, and troubleshooting of the ISP's "supported" software. Anything other than that is stuff they have stumbled onto or have researced out of curiousity.
"(or is on a quota and doesnt want to take the time to explain it)."
Again True. Every ISP I have worked for measures the Calls per hour. Not the Fixes per hour or percentage of fixes. The suits in charge of managing the call centers want metrics or a standard that THEY can understand easily and evaluate. Answering 4 calls per hour is alot easier for them to understand than 20 people fixed, 3 people Fubared, and 3 backbone related issues issues currently working.
Check here for other commonly trojan'ed ports.
Is Your Exchange Server Relay-Secure?
I'm not the sysadmin at the recruiting company we work for, the idiot is a raw MSCE who literally didn't know what the lights on a hub meant, and didn't understand what a traceroute shows when he started. When I found out by chance that the Exchange server at work was an open relay I had to spend 2 converstations and about 10 e-mails convincing him that it was indeed open and that it could be a problem. It took me 5 minutes to find this article, and I finally had to send him the link or he wouldn't have done anything about it.
I'd better stop now before I really start ranting about this idiot.
Denise
A few things like that exist. Mostly from Microsoft. There are numbers that MCSEs can call for tech support; whether they're any good I don't know. Microsoft also has those 900 numbers that cost $95 to call, where you get your money back if you can prove they have a bug. You actually get somebody competent if you call those numbers, and they really do credit you back if they have a bug.
And there's that banner ad on Slashdot for the hosting service that gives discounts to Slashdot readers.
That makes no sense AFC.
UDP port 25...who cares? Mail runs via TCP port 25.
And blocking port 25 would block all mail, not just spam. So no mail could happen. That doesn't make sense unless earthlink didn't offer email.
Use a VPN connection. Assuming you have one. If you don't, you can use a linux box for cheap (although not that great) VPNning.
Monty Python isn't funny??? Ruh roh...
Forget it. Pretend no one mentioned it. Because it really isn't part of the question. The question is: "What is the best way to get in touch with a Network Admin or someone who actually can do something about a network issue in cases like these?"
Now pretend you're the network operator for a large company. Do you really want to be dealing with customers when you could be playing Starcraft? And even if you're not playing Starcraft all day on your carefully crafted network, chances are, you have better things to worry about than your company's customers. No, you have secretaries and underlings who take your calls and check your email. They sort it. They send it to you.
Imagine you're sitting there, happily flirting with your co-worker when suddenly your beeper beeps... "zerg0 down." Bloody hell, why'd the web server crash? And why isn't it back up? Lemme go check on it... Suddenly every phone in the fucking office lights up with angry customers demanding to know what happened. Some of them are probably the helpful sort who'd like to explain to you in minute detail what happened. Well, would you rather be working on the problem or dealing with customers? Well?
Therefore, the problem isn't how to contact the network operator, but to convince the underlings/secretaries that there is indeed a problem that can only be solved by having them put you in touch with an admin. Money helps. Lots and lots of money. A legal contract entitling you to contact the network admin when you need to (which no sane service provider would sign, but you never know) might also help.
--
Peace,
Lord Omlette
ICQ# 77863057
[o]_O
Maybe I'm in the minority, but as a sys admin I actually take about half hour everyday and go through the previous day's tech support logs created by our call center.
Sure, I don't read every entry, but often you can get an idea of something that may be acting up at random, or a problem that is starting to develop.
And yes, once in a while you do get a call from someone who does know what he is talking about, but he was dismissed by the support agent they talked to.
I just wish more higher up tech people would actually spend a few minutes of their day going through such logs. I know I find them fascinating (and sometimes too funny)
I had the same problem with my DSL from Mindspring, port 25 blocked outbound, but it is open inbound.
After many calls to tech support and customer support I found that Earthlink/Mindspring let their users relay through their servers.
After configuring EXIM to forward all mail through mail.mindspring.com on port 25 all is good.
well I did anyway =)
You're a sysadmin... imagine the pain of ordinary users trying to report real problems to their ISPs.
They only appear to block the windows netbios ports 135 138 139 and for some reason 121.
Only the State obtains its revenue by coercion. - Murray Rothbard
Try looking up their contact information in the DNS. You can use the "whois" command, or the Network Solutions webpage. The name and phone number of the technical contact will often be someone fairly high up in the company (ie, someone who has the authority to change the company's DNS servers!).
If enough @Home customers become aware of they problem, *they* might start complaining to tech support. Sometimes when a large ISP gets enough complaints about the same thing, they actually fix it.
I don't understand why so many people put up with the idiocy of large ISPs. Yes, some folks have no choice if their only broadband option is cable modem. But if you have DSL, it's pretty unlikely you have only one choice of ISP. Switch over to your local ISP. It might cost you an extra $10 a month, but you're voting against stupidity and beauracracy, and supporting your local economy. I don't need "magic words" to get problems fixed. I know whom to mail at my local ISP, and the problem is solved. Why settle for anything less?
Pay phones can recive calls, you can usualy find a phone number printed on the thing somewhere.
You obviously don't live here in the states. Everyone in the states knows that the only people who ever recieved phone calls at pay phones were druggies -- drug users used to use pay phones to page their dealers, and buy drugs. So, most pay phones in most major cities in the states no longer accept incoming calls. As everyone is aware, this policy has had significant effects on the availablity of drugs in the states -- it's nearly impossible to drugs here now.
Slashdot is jumping the shark. I'm just driving the boat.
We just had a wonderful time trying to track down an email issue with Sympatico (massive net up here in Canada, I think it is the @home base here). You have to wonder if this is the Corporate machine trying to squish the little ISP into oblivion. If you doubt it, look at the history of the Carnegies and the Rockfella robber barons of the US expansion.
Our fight is not against flesh and blood, but against the rulers, against the authorities, the spritual forces of evil
If you let them know you are recording at the start and they remain on the line it is implied consent, and you don't have to have it beep every few minutes either.
Something you will also see a lot is selective blocking that is tripped by volumne. For example if an smtp server gets 10 messages in 2 minutes from a given IP it blocks that IP for 2 hours. This is to discourage spammers. The problem is sometimes these blocks aren't configured correctly, and things will get blocked incorrectly. AOL and Yahoo are both notorious for this one.
Fax the log to the NOC of the ISP in question.
e-mail back customers that complain that the problem is on the other end, and will get solved as soon as the other end bestirs themselves to fix it. CC the upstream of the ISP if possible
Be polite, yet firm.
Mega ISP's have several PFY to take calls and deflect load. This is the function of minions and woe unto those that fail in this mission. My PFY's (pimpley faced youths) mostly can tell when a problem needs to be deflected, what they can fix, and what needs to be passed up. This is in no small part because they are good people and train hard.
One thing I never want to hear about is unprofessional calls from folks. Angry, yes. Steamed, yes. Foul language, NO. They are not paid enough to take that.
Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
We pay for outgoing calls, but we are unable to receive telephone calls.
Pay phones can recive calls, you can usualy find a phone number printed on the thing somewhere. And you don't need to put any money to pick it up either.
Amber Yuan 2k A.D
"and dear god does this website suck now." -- CmdrTaco
I've had this problem before with our company and always had good luck with going through contact information from their web whois data. I might not always get the right person but I do get in contact with someone more high level than a tech support person.
--And sektor spoke and said unto the people. Hey, buttwipe hand me the cheezeos.
What the hell do you suspect from a support technician? It's not that they are stupid like you try to make appear(granted may are) but why the hell would they know anything at all about the exact layout of AOL's 18 or 19 mail servers (not sure how many they are up to)
:)"
Their job is to answer questions like "why don't my AOL say welcome no more?" and help people who "cain't get into my AOL, it sez modEm is already in use, please trii agin" (notates the vernacular of the majority of AOL users)
Now then, let's review: you call the underpaid overworked poorly trained AOL technican wanting to know why port 25 is blocked from server X.X.X.X
You execpt this technician who has never even seen a real AOL server to respond with "why this server has been blacklisted from connecting to AOL because of blahblahblahblah and we have the same problem with 200 thousand other servers that I have a list of right in front of me that MR admin provides me with daily. Is there anything else I can help you with like mapping out AOL's entire firewall and routing system? Have a GREAT AOL DAY and remember if it doesn't say welcome enable sounds under preferences
The response you actually get is canned because America's largest (sudo) ISP or really very many other large isp's don't have Network admins for tech support. I really don't see why you are so upset or suprised by this?
To make it worse you take all of your aggression and aggrivation out on this tech and expect him to immediately patch you to NOC (whom he/she has never even recieved so much as an email that wasn't addressed to blah@majordomo.aol.com
I know always stunned when the average support technician isn't able to track down server problems... sheesh
Check to see if your an open relay or have been black listed at mail-abuse.org
I see two possible reasons why you might not want to use your ISP's smtp server.
... yet. That would be when your ISP's SMTP server sucks. It may not be configured correctly. It may delay your email for hours while it twiddles its thumbs. Or maybe your ISP's SMTP server is blocked by the server you are trying to send mail to.
The first is a situation I was in a few months ago. I use a laptop for most of my email. I move that laptop from one location to another frequently. While I am on the network at work, I am using one ISP. While I am at home I used a different dial-up ISP. They ran two different SMTP servers. I can only configure my email program to connect to one at a time, so every time I wanted to send email from a different location I had to re-configure my email program. iname.com used to have a SMTP server you could use as long as you had a Reply-To line that included an iname.com email address. They have discontinued this ( I'm guessing because of spammers ), but for a little while this gave me a solution that did not require reconfiguring my email.
The second situation I can think of is one I have not personally expirienced
One other thought on the subject. I don't want my ISP blocking any of my outgoing connection attempts. It starts with port 25. What is next? They start blocking the port Napster is on? Maybe IRC is evil now because some people trade warez on there, so they block that. Eventually the only port we will be able to use would be port 80, and I think that would make quite a few of us rather unhappy.
a few days ago i noticed the same problem, it was i believe in one of their mail servers (which i now see is out of the list of mx entries) see if it is working now.
We are experiencing a problem with .home.com
.home.com
.home.com users.
as well. Frequently, mail sent to
users gets bounced back, saying that our domain
is currently in their email blacklist. I
contacted them by phone, and was told to
send email to their mailblock account. I did,
and received a message a few days later saying
we should _not_ be in their blacklist, that
there was no record of any abuse, and that perhaps
we were making a mistake.
Sure enough, we were able to send mail
to their users again. Then, a few days later,
it happens _again_ - we wind up back in their
blacklist. I contacted them almost two
weeks ago and have yet to receive any reply.
In the meantime, we are unable to send mail
to
Perhaps not all their mail servers are using
what I would imagine to be a "global" blacklist
(they have something like a dozen mail exchangers),
and our domain has somehow wound up
in one or more of the local mail servers' blacklists.
You have 2 mail accounts, joe@earthlink.net and one from work. You need to send mail from the work.com account, but ELN's mail server don't relay for other domains. Normally, you would use smtp.work.com (or something along those lines), but ELN also stops you from doing this. How on earth are you going to get the mail out?
Think outside the... Hey, where'd the friggin' box go?
I dunno... Ay my company, they're trying to deploy SMS (BOO!!!) and there are accounts that have to be created with certain permissions that the managers (who rarely, if ever, make physical contact with the networks) are nixing for "security reasons". They don't like the idea of accounts being available with such access that aren't used by normal users. As much as I don't want SMS in, this is a perfect example of how managers can over-ride the NE's best (and usually better) judgement for various non-technical reasons.
You can never go home again... but I guess you can shop there.
Many email servers will do a reverse lookup on the IP address. If the reverse look up looks like the type of name given out as a dialup or consumer IP or does not resolve, the SMTP server will not accept the mail. Yes it very difficult to get help from an ISP on this but this is one of the most common filters. On top of this there are several blacklists that can keep specific IP blocks from sending mail through mail servers that use the list. First and formost, make sure that you have a sensible reverse DNS lookup like mx.mydomain.com as apposted to 123-21.54.mydomain.com. If you have DSL and are trying to run your own MTA, ask you provider to set up a reverse DNS name. Some will do this for a small fee.
I had an issue with my old dialup - I couldn't access sites likes slashdot, freshmeat.net, or google.com for several days(yet could contact them from other servers outside of my ISP). I logged onto their technical support IRC chat room, and talked with a tech for awhile... He said try back in 24 hours if it didn't work by then. It didn't so I came back and we discussed it. Immediately the network operations staff logged into the chat room and we talked about it, then i allowed them to bounce through my linux box and investigate - they fixed their routing tables and within minutes I was set to go. This is the best support experience I've ever had with an ISP. *EVER*. Having worked in an outsourced tech support call center where a customer could NEVER talk to anyone directly associated with the networks, I understand how priviledged I was that time :) Unfortunately I jumped ship from my dialup ISP to move to cable, but they will remain in my memory as the best ISP in Ohio, and probably the planet :)
.ad.
"Hi I'm Forrest with Montana Internet Corporation. I was wondering who I needed to talk to about a routing problem which is affecting one of my customers."
I think this immediately clarifies that they are talking to someone other than the end user and are much more likely to call someone if they can't figure it out.
It took me about a month and a half to get reverse dns from @work (@home's business connections). It was a pain.
Yes, I used to work for a company that AOL couldn't get to, period. Not just email, but everything. We found out later that it was a DNS problem, and a change we made weeks earlier still hadn't updated to all the proxy's. This went on for almost 3 months, when finally AOL's cache was completly flushed. All other ISP's had updated their cache within 24 hours. I was so mad I put up a message on the old IP saying that if you where an AOL customer that you wouldn't be able to access our systems until AOL fixed their problematic architecture... we almost got sued for slander, so I don't suggest that route.
Bottom line - I too talked to (clueless) AOL tech support for hours at a time to no avail. We just had to wait for this wierd caching problem to go away. Problem is, our customers thought it was our problem... they seem to think that we control how they get to the Internet. You just have to educate your customers that you can't control 80% of the process (computer hardware, OS, browser, ISP, backbone/NAP's).
There is no longer anything that can be done with computers that is nontrivial and clearly legal. -- Paul Phillips
@home has been blocking connections to their mx's from my mail server for the past month or so. I have an @home connection. This basically meant I was unable to send email to anyone with an @home email address. I have emailed and called @home on several occasions with nothing but brick walls on the other end. Now, all of a sudden, all of their mx's respond on port 25.
:)
Their current mx's:
mx-sfba.home.com internet address = 24.0.95.231
mx-sfba.home.com internet address = 24.0.95.240
mx-sfba.home.com internet address = 24.0.95.241
mx-a-rwc.mail.home.com internet address = 24.0.95.20
mx-d-rwc.mail.home.com internet address = 24.0.95.23
Here's a couple tests:
Trying 24.0.95.231...
Connected to 24.0.95.231.
Escape character is '^]'.
220 mx6-sfba.mail.home.com ESMTP Sendmail 8.11.1/8.11.1; Sun, 21 Jan 2001 16:31:24 -0800 (PST)
^]
telnet> quit
Connection closed.
Trying 24.0.95.240...
Connected to 24.0.95.240.
Escape character is '^]'.
220 mx9-sfba.mail.home.com ESMTP Sendmail 8.11.1/8.11.1; Sun, 21 Jan 2001 16:31:45 -0800 (PST)
^]
telnet> quit
Is it all coincidence or did someone at @home with higher than average intelligence read this very same slashdot article??
Its fixed now.. way to go whoever
Earthlink is rejecting mail from a Pacbell IP address not coming from a Pacbell mail server. That is the problem cited. The problem here is that Pacbell should delegate reverse DNS to the customer so that the mail can apparently originate from his own domain's IP address. Or better yet (in my opinion) shut off reverse DNS.
What is the reverse DNS for the 'national DSL provider' resolving to? I'll bet that's the problem. Are the admins at the 'national DSL provider' easy to reach? My experience has been that they are ALL difficult to reach and of dubious technical competence once reached.
They're the ones that suggested that I "call linux", because the problem was "obviously at my end". Turned out that they made a big mistake with the records for my company. It took three days and climbing up several levels of command to get any action.
--
One future, two choices. Oppose them or let them destroy us.
"NOC and Tech Support typically do not get along. "
heh. probably because NOC ppl begin to associate stupid problems and stupid users with TS ppl (who may be stupid people themselves), and TS ppl not only resent that association (they hate the users themselves), but begin to associate NOC ppl with causing the problems that make them (the TS ppl) have to answer calls from id10t's all day. a vicious cycle.
eudas
Blessed is he who expects the worst, for he shall not be disappointed.
oh i fully agree with you; there are two sides to the issue. sysadmins and netops ppl don't always know what the hell they're doing either, and can cause great pain for the poor TS monkeys who have to answer the phones when it happens. netops can screw things up royally with just *slightly* wrong configs on things like routers, making TS's life hell. (there were other stories above with events similar to this.)
in closing, i realize that i may have come off as sounding like i thought all TS'ers were id10t's, but that's not what i meant at all. i merely meant to make the point that it is entirely understandable why the two groups might not always get along.
eudas
Blessed is he who expects the worst, for he shall not be disappointed.
I'm serious, if we could pull off a system like that, the rest of the ISPs out there would have to take notice when 1/2 of their broadband client's switch over.
I heard Dutch provider xs4all blocks ranges from the Chello (=UPC) cable company.
If you can't get satisfaction, write a letter to the board. In Aussie law at least (and it would probably be the same in the US) the letter must be read at the next board meeting. Since this tends to make the CEO look stupid if the problem has not been solved, it is a very good bet that the problem will be solved BEFORE the next board meeting.
Zero Sum (doesn't amount to much).
Zero Sum (don't amount to much). [root@localhost]
That's probably true. Someone else mentioned here that sometimes he'll call tech support and get someone who obviously can't help him, so he'll hangup and call back again in the hopes of getting a better "tech support" person. I've actually done that on several occasions myself. That said, I still like my "packetstorm" phrase :O)
--It's Pimptastic!--
We're all geeks over here>>> The Linux Pimp
--It's Pimptastic!--
I've heard some bad reviews from users of @home. Apperntly, the tech support is the only way to contact the sysadmins.
It must be very hard for normal users.
Idle hands are the devil's workshop, but idle minds are much worse
This has popped up for some of my popsite and uunet dialup customers - we opened up port another port in our firewall, mapping it internally to port 25 and told them to change the port number from 25 to the new one, and everyone is happy.. Port wars any one?
The problem with a lot of ISP's now is that they are implementing much more drastic spam control. Many ISP's won't allow direct connections from anyone who looks like they're on a dialup host (which more then likely is the problem you were running into).
.mx from connecting to my mail servers. It really works wonders..
Most of the time, its just a basic hostmask search for "dialup", "ppp" and the like. If the server finds a match, it denies the connection, and tells you that you need to go through your regular ISP's server and not connect directly to them.
In addition, a lot of ISP's are now implementing port 25 blocking (where they won't allow you to connect to any system other then their own mail servers on port 25) to help get rid of spam.
Its likely that you just happened to have partially the same hostmask as people who were spamming, and the mail servers are treating you as such.
I run my own private mail server, and I don't really get very much spam anymore... Thats because every time I get a piece of spam relayed through an open relay in mexico, i just block
Granted, this isn't a good solution if you ever think you might receive a legitimate piece of email from mexico, but I'm pretty sure I won't be (and definitely won't be now!) so it turns out to be a pretty good solution to me.
One of these days i'm going to find this 'peer' guy and reset HIS connection!
Late last year, my company realized that mail from our server to AOL addresses was disappearing into a black hole. A lot of research revealed that our IP address was in a range that AOL was blocking, because a spammer had used address(es) in that range. No amount of cajoling was ever successful in them lifting the ban on our address (which definitly doesn't spam). Our Chairman is a former AOL VP, and even he couldn't get past the AOL blockade. In the end, we moved from @Work to a different T-1 provider, and the problem went away.
In fact, I tried submitting this one to Slashdot [2001-01-08 16:48:31 Earthlink blocks UDP port 25 (articles,censorship) (rejected)]. The excuse is that blocking port 25 allows the ISP to crack down on spam. The average spammer uses a proggie to send hundreds of spam e-mails every hour, so why don't they just monitor the SMTP transfers per hour and then draw their own conclusions?
"Ancillary does not mean you get to rule the world." --U.S. Circuit Judge Harry Edwards, speaking to the FCC's lawyer
Exactly why people are speaking out against blocking port 25. It takes away their right to use other e-mail providers through SMTP. IMHO That is an infringement on an Internet User's basic rights. I sincerely think that a "Netizen's Bill of Rights" should be written and put into law so that things like this don't happen.
"Ancillary does not mean you get to rule the world." --U.S. Circuit Judge Harry Edwards, speaking to the FCC's lawyer
Okay, so it's TCP port 25. I'm sorry, I got confused.
"Ancillary does not mean you get to rule the world." --U.S. Circuit Judge Harry Edwards, speaking to the FCC's lawyer
It just some organizational tree thingie. I am in Singapore and my broadband providers won't let you speak to technical guys even. You're supposed to liase with customer service personnels who knows almost nothing about those 'geeky' terms you use, like "SMTP" or "HTTP" or "DNS". I mean, there was once they cut my line off and said I was running a server, and told me to shut it down. I asked them what the fuck do they mean by server, and it took me almost two damn weeks to just get them to ask the technical guys what the heck did they actually detect on my box. (It was a FTPd) Damn they should allow customers to speak to some tech guys they employ to do some frontend customer service.
Use whois (via geektools.com, which follows things through multiple registries) to get some contacts. Large ISPs most likely have postmaster@ and abuse@ routed into the front-line support organization. A typical structure is customer service (billing, signups, and so on), tech support (can't connect, what's my mailserver, and so on), NOC (basic service monitoring, fixing/reporting simple outages), then possibly a deeper net ops group (fixing BGP, things like that), a sysadmin group (running servers). Beyond those you get into engineering (building new infrastructure) and possibly development (custom coding). People beyond the NOC level are expensive enough that management doesn't want their time occupied by lower-level work, so they tend to be hidden. They are sometimes exposed in things like WHOIS entries, which is why that's a good route. Other than that, you need to be active in the communities where these folks hang out and just pay a lot of attention. For instance, the NANOG list is a good place to find network ops and engineering types. inet-access - if you can stand the volume - was another place I recall seeing a lot of ISP types. There are probably also some other (limited-access) fora with some of the "right" kind of people kicking around - if you're in the business, you'd probably want to find these anyway.
I'm paying $80/mo for SNET's "professional plan" but that doesn't entitle me to be able to report an important technical problem to tech support. I'm paying for a static ip address, but more than a week later it's still all over the place. Tech Support told me they just give out the ips, that's all they knew about them, and transferred me to another dept that transferred me, etc etc, in circles. I never reached anyone that professed to know anything or returned my calls. (Though i have to admit that a hail mary email to a usually useless "feedback@snet.net" did net me a "sorry for the inconvenience".)
"Be thankful you are not my student. You would not get a high grade for such a design
Hit 'em with a denial of service attack from one of your boxes. Then they'll be pounding on *your* door. Don't hurry to respond.
Remain calm! All is well!
Amen, brother.
Some times old tech works best :-)
stonewolf
... in Southwestern Ontario, so I'd have to agree that there do seem to be some signs of intelligent life in there. They were very knowledgable and helpful when I called. The young lady I spoke to even asked me if I had the cable modem Howto. Of course, your mileage may (and apparently does) vary...
it sounds like you have the wrong type of product rather then a tech problem. I am on the @Home network with Shaw up here in Canada, and you cant run a mail server with the home product, because they do check for servers and stuff, but they have a business product that allows you to set up any server at all, which I have a share in. Its more expensive, but it also has more bandwidth available and static IP's and stuff. We have a mail server on that one. We also have a very good relationship with our salesman, and he takes very good care of us.If there is any problems, we get escalated pronto. We then slip him a case of beer or two and a letter of recomendation. It works well.
Come on: an email coming from a dynamicly allocated IP address is:
- Spam
- Legitimate
- Possibly either, there's no way of telling
The answer is (3), there's no way of telling.As far as the last comment goes, I'm not sure what you're trying to suggest. "If you want to run a mail server" means, if you're suggesting it applies to me, "If you're using a standard email client on a default-configuration Linux or BSD box", and "get a static IP" is generally not easy, and when obtained usually expensive. And rarely does it solve the problem - at the time of my problems with Netcom, I had (thanks to an agreement with my ISP's admin, who's since left so I'm back to square one) a static IP address.
Let's face it, the only way of blocking spam is to look for it and block on the basis of it being spam. It's worthless trying to block incoming SMTP requests from a small handful of ISPs when you're going to block legitimate email at the same time, probably more legitimate email than spam to be honest, and you're still as much at risk at the end of the day from people finding the ISPs that aren't in your list.
It's stupid, inane, sysadminship which is all to do with acting as if you're dealing with the problem, rather than doing something concrete. If I ran an ISP and found a sysadmin subscribing to the DUL, I'd fire them.
--
You are not alone. This is not normal. None of this is normal.
And I have to admit, for the first time, to object to a policy of MAPS. Sending email directly from a machine is not only RFC compliant, but actually "correct" - there is no RFC mandated basis for the practice of relaying, authorised or unauthorised, it's just something that happens to work, and was originally supplied by ISPs to make life easier for customers. Indeed, this is one of the reasons why blacklisting SMTP servers that relay is legitimate.
I'm not arguing that they don't have the right to incidentally, I'm arguing that it's brain-dead and breaks the spirit of Internet cooperation by intentionally breaking an RFC compliant process. Especially as the majority of Linux machines I've seen tend to use sendmail to deliver email directly by default.
It looks though like the problems I had were a unilateral action by Netcom - indeed, only the ix.netcom.com addresses were effected, I could email to people with @netcom.com or @mindspring.com without the slightest problem.
--
You are not alone. This is not normal. None of this is normal.
Now the posting I was replying to, which implied it's reasonable to block email if there is a small chance that it's spam even if the method it was sent was RFC compliant and the alternatives are not, and even if a substantial amount of legitimate email gets blocked at the same time, seems to be to be more deserving of the term. But, hey, let's not let logic get in the way of the War On Spam.
--
You are not alone. This is not normal. None of this is normal.
A strange policy.
Much as I accept that spam blocking is an imperfect art, it's always important to ask the question: Will my method prevent someone legitimately contacting someone on my machine? A check for an email containing a URL and all caps subject line may occasionally block a legit email, but not in any way that can't easily be circumvented by the sender. It's an annoyance.
By comparison, the DUL is non-negotiable. A user who is blocked has to reconfigure their system to use an ISP's mail server, which my experience showed is STILL NO GUARANTEE that the email will eventually be delivered - if the DUL lags behind local policy, for instance. Configuration may be simple - the information about which server to use is readily to hand, the email delivery client having an obvious place to set these things, or it might be more difficult - and with sendmail, at least, it's not straightfoward.
A better solution, for ISPs that want to prevent their own customers from spamming, is to redirect port 25 to their local email relay. This may not be perfect, but it doesn't break RFC compliant customers email. But that's for the sender ISPs. If an ISP is having problem with spam from a particular other ISP, it needs to figure out a sane way of blocking that spam. As DUL is going to block at least as many legitimate email as illegitimate, it seems reasonable to suggest that DUL is not sane. It might, in those cases, be more appropriate to temporarily block that ISP altogether, and get it to clean up its act.
--
You are not alone. This is not normal. None of this is normal.
There was a lot of hassle involved. Netcom, then owned by Mindspring, clearly had a massive wall between their system administrators and their support people, with no direct way of contacting the sysadmins. I'd email the support address, and get an email back from someone clearly too clueless to know what an SMTP server or MX address is, insisting the problem must be my end or with my ISP. In the end I basically had to persist, phoning their 1-800 number in the end, getting names of support staff involved, and following up every inch.
I found it tough. The more you point at RFCs and stuff, the more you look like, well, the sort of people you get on TV claiming you don't need a drivers licence because the states aren't constitutionally allowed to forbid you from using the roads or that banks are allowed to create money because of some legal loophole. The person you're talking to has no idea what an RFC is, or an MX record, or anything like that. All they can do is accept that you've tried it all different ways and can't send email.
In the end they put a ticket in with their system administrators, who knew exactly what the problem was and fixed it.
From what I can figure out, the problem was because my ISP's IP address block is smack in the middle of BellSouth's (BS providing the connectivity), and Mindspring had configured the Netcom servers only to accept email sent directly from BellSouth's email servers, not from BellSouth customer IP addresses - my bellsouth.net account continues to this day to have the same problems but I'm buggered if I'm going through the hassle again. This is stupid anyway, but of course as the complaints were coming from people who deliver their own email, or from people with ISPs in similar positions, of which there are probably relatively few, few enough for it to look like most email is being delivered perfectly and therefore it "obviously" being a problem on the deliverer's end.
Why they did this is anyone's guess. I think, given the problems I have being let onto any IRC servers these days, that a lot of the hacking being done at the moment is being done from Bellsouth.net addresses, but I haven't read anything anywhere to back that up. Mind you, the problems emailing ix.netcom.com started a year ago, whereas EFNet's clamp down is at most 4-5 months old.
My advice? To be honest, just keep trying, and keep piling on the pressure until they relent. Send email to the support addresses. If you don't get a response, start calling - preferably calling the @Home customer's 1-800 support line. Keep calling, get names of support people, and don't stop until the situation is resolved.
If Mindspring hadn't finally relented and put in a ticket to their system administrators, I'd probably have used Usenet or something similar to start embaressing them, a little log of an nslookup, telnet to an SMTP port, and then this posted on an appropriate newsgroup. But as it was, it got fixed.
--
You are not alone. This is not normal. None of this is normal.
A. instead of upgrading their aging equipment, they now ban all connections to napster.com (including the www address) presumably because mp3 traffic was consuming too much bandwidth.
B. I run a small webserver I use for personal testing stuff. one day I had my service cut and got a tech support call saying I was running an illegal webserver. I explained my position and apparently it was minor enough that they didnt pursue me any farther. It still annoyed the hell out of me.
-
Greetings, I am a admin on webFreaks.org, a small private linux box. We had problems with our mail connecting to theres, and their mail connecting to our mail servers. I emailed root@msn.com, to notify them of the problem, thinking I wouldn't get a reply, less then a day, I got a reply from the root@msn.com "guy", with very friendly help. We sent numous emails back and forth during that week, testing different mail servers, etc, and finally figured it out. It had to be the best tech support from a huge company that I've ever gotten in my life. I'm not big on msn, but I sure do love the root guy! But, I have noticed big companies, and trying to get a hold of someone, or even trying to resolve a issue is pretty much impossible. Expecially spam related issues.
Cable hasn't arrived in my area yet, but when it does, it will be under Adelphia.
Right now, I keep my box connected all day via dial-up to my ISP, and run some mailing lists that me and my friends communicate by, as well as Apache. I have my own domain and use a dyanmic DNS service to keep it updated.
I'm not really concerned about port 80 being blocked, since I could just set Apache to run on another one; but I am worried about Adelphia blocking port 25. Is anyone with Adelphia running a mail server successfully?
On another note, there are some cool dynamic DNS services that do port forwarding, so if your ISP blocks port 25, you could keep SMTP running on any other port, while your domain still is able to receive mail on port 25. They generally cost a little more than average though.
@home (at least publicly) uses the following IP addresses for mail exchange.
24.0.95.20, 24.0.95.21, 24.0.95.22, 24.0.95.23, 24.0.95.25, 24.0.95.231, 24.0.95.240, 24.0.95.241
Try using the IP addresses above as your SMTP server when sending mail to the @home domain and see if that 'fixes' your problem.
I was having serious problems (line down for 3 months at a time) with our connectivity, so I took matters into my own hands so to speak.
After searching their webpage, I found an email addy for joeShmuck in accounting, it was first letter of first name, then last name@isp.com (i.e., Jloser@isp.com). Pretty obvious.
On a hunch, I went to their Management page, and looked at all the bigwig's name's. From there, I sent an email to each of them based on the pattern of the accounting person's email address. Each describing the problem and the lack of customer service to fix it. Soon as the VP of and the Pres of , ect ect, all the big people, read my problem and contacted the network admins, I've had great service. Anything I need, I get (they couldnt figure out how to fix the physical line, so they bought and gave us their wireless gear for our connection).
Sometimes unorthadox, roundabout ways are the only way to get something done. Contact the Big Cheese's and let them know whats going on. I'm sure it'll be cleared up in no time.
--Dave
I wonder at the volume of complaints vis-a-vis the issue with Earthlink blocking port 25 to anyone but someone on their own network.
Unless I'm mis-understanding the issue here, the only issue is with sending unrestricted emails through someone else's server. What's the problem here?
I don't believe you can legally record phone conversations without the consent of both parties involved.
I recently moved to FreeServe since it's service is unmetered (and, at the time BTi wasn't). I've niticed that FreeServe take all the e-mail that's sent out by my mail server (no matter what host it was intended to be sent to) and route it through their mail server (well, actually it's PlanetOnline's server).
IMO, this is better than just blocking your mail server. I know this isn't exactly the problem we're discussing here, but it's the only similar experience I've had (as I've never had a problem sending mail from my server to another mail server), and I thought it was partially relevant.
Follow me
I've worked at the tech support, admin, and programmer level, sometimes more than one of these at a few companies. If you have been on just one side, you can still relate. It seems rather clear to me: despite the similar skills and knowledge set of admins and support staff, the relationship between the two is never one of full cooperation.
Forget about getting ahold of the admins -- what you really want to do is get ahold of their bosses. The admins will resent you, but it is likely the only effective way to reach them (if someone here doesn't step forward).
"Watch these suckers jump when I get root." - l33t j03
Same here Verizon is "filtering" ports like 113 ... i emailed them b4 about it i cant login any IRC servers and it makes me mad. theyre also filtering other ports i despize them.
We verified that we are not open to relay when we set up the server. We checked again last week when we were investigating why we couldn't send email to at home. We even looked up the tech notes from MS that others in this thread have referenced to be sure we didn't make an error.
It's unlikely that any spam was coming from our server, we are a three employee consulting firm and none of us send spam. Also, the MX record for our domain was only recently pointed to this server (3 months ago).
I checked the anti-spam lists. Our IP is not listed. This is clearly a problem only with @home. The frustrating part is we can't get ahold of them to fix it.
Remember... ZG9uJ3QgZm9yZ2V0IHRvIGRyaW5rIHlvdXIgb3ZhbHRpbmU=
When my small consulting company tries to send email to our customers on the @Home network we get this message back (edited to exclude our domain):
Unable to deliver the message due to a communications failure.
550 5.0.0 Mail originating from that domain is not welcome here.
We host our own email from our Exchange server. There's no reason our domain should be blocked. How can I check if @home is blocking us?
Remember... ZG9uJ3QgZm9yZ2V0IHRvIGRyaW5rIHlvdXIgb3ZhbHRpbmU=
Preach On!@ Actually, this is the way that most ISP's (with a clue that is) do this. I've worked for several ISP's (adminnin') and this is common practice at each and every one of 'em.. And yes, if they're not my users, they're also not my problem.
I don't know if this has been mention yet, but I know why they are blocking connections from some ISPs. I am a Comcast@home customer and I get my forwarded to my pop account with them. I wasn't recieving a lot of mail I was expecting to recieve from people sending directly to my account and I called @home to find out why. They said its their policy to block a domain from sending mail to all of @home if an @home customer calls and complains about them. Then @home tried to contact the "offending domain" and if they don't respond or don't comply, @home will block them until they do.
It's funny how one person can ruin something for eveyone else so easily.
This never really sounded sensible, and the absurdity of the situation became painfully obvious a few weeks ago when we discovered that nobody at my client could connect to a specific server on the other side of the country. After waiting long enough to be sure it wasn't the usual sort of Internet connectivity issue, we began trying to find out what was happening. We could ping the server, and could traceroute to it - but connections to its primary services always timed out. It took a week of phone tag to find out that the reason was that a router, several layers up the provider-tree, was misconfigured. Even then, it was only fixed because my boss happened to know someone at the appropriate company!
Its pretty frustrating, overall. Each ISP one calls tries very hard to filter you out with their regular support staff, presumably to ensure that their sysadmins remain sane. It shouldn't take a week of phone calls to get one configuration issue resolved (or explained) - but that's the downside of a big, distributed, barely regulated system!
Lead developer, http://wisptools.net
It's good to see that I am not alone in my ongoing battles with Adelphia. For months I've been sending pings and traceroutes displaying how Alter.Net/UUNET, which is one of Adelphias main backbone providers, experiences massive amounts of packet loss and latency during prime time hours.
Since the problem occurs at the fourth hop it effects just about 90% of the sites we are routed through. Unfortunately about one third of the support engineers I speak to don't even understand what the difference is between 30ms and 600ms. The rest of the time I receive "Unfortunately this problem is outside of our network". This is when I forward them UUNET's SLA's and request that they contact UUNET and ask that they request the NOC to look into the problem. Although they say they will escalate the problem they never do and every time I call back attempting to get status on the situation I get the runaround.
I've attempted to post on Adelphia's message forums requesting that other people contact Adelphia. I figured that if I could educate other members that subscribe to the service they would call in as well. Unfortunately prior to posting support reviews all of the messages prior to allowing them to be displayed in their forums. Needless to say none of my postings reach the public.
I've even attempted to contact UUNET's support via email and calling but since I am not a direct subscriber to their services they refuse to escalate my requests to review the problems.
If anyone has any other information on how I can get through to people that can actually help resolve this issue please feel free to email me.
Thanks,
- Kujoe
In reading the other posts it is the INCOMING Port 25 that these other ISPs are blocking. With AOL they are blocking the OUTGOING Port 25. So if you dial into AOL and try to connect to a SMTP server on Port 25 you will fail.
Following Lisa's posting about "@Home blocking PORT 25" I would like to add that AOL does the same thing.
Our traveling reps use AOL to connect to the net when they are away from the company LAN. We were having issues with email constantly getting rejected. A quick telnet diag revealed that AOL has a Proxy on port 25 that grabs users requests.
Numerous calls the AOL Joke Support didn't get us anywhere. Just explaining the issue is grueling because the Script Reading techs just spout off canned answers like "We only support AOL mail and not Outlook, etc". I tell them "If AOL is suppose to be a true ISP they shouldn't hinder people trying to use Port 25." When you try to ask for a Senior Tech they keep on with their canned drivel.
We've had to setup another mailserver at the company that listens on Port 2525 in order for our users to send mail. AOL won't acknowledge the issue at all.
Every other port works fine, just Port 25 they capture for some reason.
hey i kinda have the same problem with @home.....i use them at my house.....and they wont let me connect with their netmail.home.com server...this alows u 2 recive mail from ur @home pop when u r "not at ur computer" (or if u have a firewall and u share ur connection with around 13 computers when its only supose 2 b one)....i am almost 100% sure that the server is told 2 refuse connections if the ip is an @home ip....so i called them up...and they completly blew me off.....1st i talked 2 a guy who knew nothing so i told the dood 2 connect me 2 some1 who actually knew what he/she was talking about and the guy hung up on me...so i called under a different line and they kept throwing me around the office and no1 would answer my question...when they finally did i go told "no we dont block any ip's on any of our servers" gggggrrrrrrrr lamers.....
~Help the space cows are comming for me....
u know what bandwidth i get with @home.....almost t1 all the time......dsl didnt gimme that.....fractional t1 didnt either....and u gotta be kidding if u think my parents will pay for a t1 line 2 our house....yeah it sux...
~Help the space cows are comming for me....
I'm currently developing this client/server application and I have the server listening on port 31337. Anyways, I was testing my program from my home computer which is connected to the @home network. But for some reason it wouldn't connect to the server, keep on saying no route to host or some other error. I got my friend to try it, who is on @Home as well, and the same thing was happening. I know that the program works and couldn't figure out why it wouldn't connect. Anyways, after hours and hours of debugging, I tried running the server on another port and it worked just fine. I tested the client on another friend's machine that's just using a regular dialup account and it worked no problem. So it seems like for some reason @Home doesn't like port 31337. Just curious if anyone else has run into this problem and if @Home is aware of it. Also, are there other ports that @Home doesn't allow?
I work as a Systems Administrator at a ISP in the UK. I would be seriously pissed if anyone phoned me out of the blue. My job is not customer facing thats support's and custoemr service's job.
That almost ALWAYS gets their attention. Basically someone has to sign for the receipt. You can even address it to the CEO. Usually the only people that use Certified mail are lawfirms that are about to sue ;)
Old age and treachery almost always overcome youth and skill.
We have been having problems getting our mail to @home. They are blocking port 25 access from our mail server. We do not know why. Here is @home's commentcomment on the matter.
Hah!
We followed this procedure and at least one of our subscribers did with very positive effect.
First, telephone the standard support number at 888-824-8166. Be prepared with your name, address, subscriber id (this is your @home email address) and your personal security code. Also be prepared to wait a while because they are often pretty busy. Your wait can be up to one hour and will probably be more than 30 minutes. When a technician answers, tell them this:
If you want to get the email that is waiting for you, do not give up until they give you a trouble ticket number (this is your official confirmation that they know about the problem. If you don't get a trouble ticket number, your problem has not been logged. If you have enough trouble tickets, you can ask @home for a refund on your service for the month.)If you can do an IP trace on your mail (like if you are a sysadmin) and prove that the mail is being bounced, so much the better. If you are a regular user, you will need to have at least one of your bounce messages and a copy of the message header. Make sure you speak with their level 2 support and send them everything they ask for. If you don't know how to retrieve a message heaader, they can tell you. Don't give up until you are positive they have your documentation and you have the ticket number.
You can also use the @home chat room. Select the option for customer support. Note that they are very unwilling to give out trouble ticket numbers during chat and probably won't do anything. But you can save the chat session and it may be useful in subsequent correspondence.
And some of it is amusing also. It is left as an exercise for the reader to find out why...
If this fails and you don't start getting your email, the @home escalation department is at 888-824-8296. Don't call them until you have a ticket number. Be emphatic and explain the problem. Spend as much time as you like with them. Occasionally the people at this level are effective.
If THIS fails and you STILL don't get your email, The AT&T Executive Appeals group is at (800-800-2824). You will need your ticket number to talk with these folks also and you will need to be patient to wade through their system. This is a useful exercise because they do formally log these and report them.
If you STILL don't get your mail, you can complain to executive management for @home. Daniel Somers, (720-875-5500) is the head of the AT&T broadband services division. He is in Colorado, the Mountain time zone. His phone is answered by a human and his executive assistant is named Jennifer. Ask for her. She seems to be one of the few effective and accessible individuals in the entire organization.
And finally, there is David Dorman, 908-221-3901 , the president of AT&T and Michael Armstrong, 212-387-5400, CEO of AT&T. Note that this is in New York City, so they are in the Eastern time zone. Their secretary / phone answering people are very polite. Some of them are also helpful. Mr. Dorman's executive assistant is Marie Miller. She is a pretty effective individual. When you call, explain that you are a customer who is having a service problem, that you need help. Be courteous, but explicit. And don't give up.
Once this problem has been resolved, write Michael Armstrong, David Dorman and Daniel Somers, personally and individually (by FEDEX - personal and confidential, to insure that the letters are received and that it is possible to tell who signed for them.) Praise those who have help and letting the chips fall where they may for those employees of theirs' who have hindered the solution. Provide detail, be literate and polite.
It may also be useful to contact George Bell, Chairman and CEO of Excite@Home (the @home service provider to AT&T, Comcast, and all other XXX@home subscribers) and make sure Mr. Bell is aware of all the roadblocks thrown at you in resolving this problem, the Excite@Home employees who would not help you, and (if appropriate) the ineptness of their first level of technical support, as well as your praise for those employees who have helped solve the problem.
Good luck, be patient, stay calm and have fun!