dot.kde.org

[Berend De Schouwer]

On Wednesday, 21 May 2003 16:57, you wrote:
> Berend De Schouwer <bds at jhb.ucs.co.za> wrote:
> > I still see this.  I /should/ come from 196.23.43.253 or 196.23.43.254.
> > Unfortunately our ISP runs a transparent HTTP proxy, so you might see one
> > of their proxy's IP numbers.  I believe that one of the IPs used by the
> > ISP's proxies is 168.209.98.35.  The ISP does use more than one proxy,
> > though, so it might be a different IP (prolly in the same range).
> >
> > I tried getting http://dot.kde.org/testfrombds -- maybe you can see that
> > in your logs?
>
> Smart guy. :-)
>
> Your IP is 168.209.98.67 (netcache7.is.co.za).  I've unbanned it, so
> hopefully the problem is gone.

Thank you.

Since this is in the same range as 168.209.98.35, I did a little lookup.  "is" 
is our ISP, so:

$ for X in `seq 0 9` ; do host netcache${X}.is.co.za; done
Host netcache0.is.co.za not found: 3(NXDOMAIN)
netcache1.is.co.za has address 168.209.98.34
netcache2.is.co.za has address 168.209.98.42
netcache3.is.co.za has address 168.209.98.50
netcache4.is.co.za has address 168.209.98.58
netcache5.is.co.za has address 168.209.98.66
netcache6.is.co.za has address 168.209.98.35
netcache6.is.co.za has address 168.209.98.35
netcache7.is.co.za has address 168.209.98.67
Host netcache9.is.co.za not found: 3(NXDOMAIN)

netcache1->7 exist.  netcache8 didn't respond, but netcache6 responded twice.  
netcache9 does not exist.  I assume there are 8 operational netcache's.  You 
may have banned the others.

> The reason it was banned in the first place:
>
> # Wed 07/May/2003:15:17:41
> #
> # GET
> /cgi-bin/formmail2.pl?email=king at chizeck.com&realname=ghxefr&recipient=silk
>k at aol.com%2Chotmami66i at aol.com&subject=http://dot.kde.org/cgi-bin/formmail2.
>pl&=hello%20Sir #
> 168.209.98.67 -

That is one of the problems of an ISP running a transparent proxy.  You share 
it with a bunch of people, and they may make you unpopular :(.

Looks like one of our ISPs other customers is a spammer.  Assuming our ISP 
only proxies customers...
>
> Cheers,
> Navin.

-- 
Berend De Schouwer