Posted by Norman Peelman on 12/06/07 23:49

Chilly8 wrote:
> X-No-Archive: Yes
>
> "Jerry Stuckle" <jstucklex@attglobal.net> wrote in message
> news:Ze6dnUvZ38qZgMvanZ2dnUVZ_uninZ2d@comcast.com...
>> Chilly8 wrote:
>>> "Jerry Stuckle" <jstucklex@attglobal.net> wrote in message
>>> news:0v2dnWmDBPFamsvanZ2dnUVZ_j-dnZ2d@comcast.com...
>>>
>>>
>>>>> It appears that by simply blocking incoming traffic from the networks
>>>>> of three data centers around the world has stopped it. I have only see
>>>>> one "phony" registration all day, coming from China. Blocking all
>>>>> traffic from inHoster in Ukraine, Keymachine in Germany, and
>>>>> FDC servers in Chicago has pretty much stopped the porn bots.
>>>>>
>>>>>
>>>>>
>>>>>
>>>> For now. But how many legitimate users might you be blocking, also?
>>>>
>>>> Blocking an entire range of addresses is almost never the right answer.
>>>> Just the expedient one.
>>>
>>> I doubt I would be blocking any legitimate users, as those sites I
>>> mentioned
>>> are all server colocation facilities. It appears that somoene has
>>> compromised
>>> all the machines at least two of those server farms. It might be possible
>>> that
>>> some users, trying to use a proxy from work to acoid detection by the
>>> boss, might be affected by blocking FDC servers, since a couple of
>>> popular anonymity services use FDC for their server needs, but
>>> beyond that, I don't think many legitimate users will be affected, but
>>> there really is no other answer to the problem.
>>>
>>>
>>>
>> There are lots of other answers to the problem. Some have been listed
>> right here. And none of them involve blocking a whole range of IP
>> addresses.
>
> By blocking them at the firewall level, it will appear the spammers using
> the compromised machines at FDC, inHoster, and Keymachine that my
> site went down, since they will get the 404 Server Not Found. It will
> appear on their end that my site went down, and they will NEVER
> figure out what I did. I figure they will go away after a while. I have
> SuperXXXPorn and BestInWeb stopped DEAD IN THEIR TRACKS.
> I have them totally outsmarted, adn they will NEVER figure out what
> happened.
>
>
>

I've given up watching CSI Miami just to watch this thread...
entertainment at it finest (2nd only to OMH).

---
Norm

[Back to original message]