[LINK] TIO ....Re: Does your ISP randomize the DNS source port?

[Marghanita da Cruz]

Jon Seymour wrote:
>> On Tue, Jul 29, 2008 at 5:13 PM, Scott Howard <scott at doc.net.au> wrote:
>>> On Mon, Jul 28, 2008 at 11:49 PM, Karl Auer <kauer at biplane.com.au> wrote:
>>> Any ISP that hasn't patched this problem yet deserves to be shamed.  This is
>>> a major vulnerability which is being actively exploited - although I'm sure
>>> there's no end of still vulnerable systems out there, there are _zero_
>>> excuses for ISPs not to have patched their systems by now.
> 
> I guess I should (rather sheepishly) point out that my ISP has now
> fixed the problem. It seems I should have taken their original
> assurance at face value :-)

Well perhaps not at face value - but on

a)whether they acknowledged the problem
b)whether you think they have an idea of what you are talking about
c)whether you think they know what you are talking about but are denying it

I have had problems with a "recalcitrant" ex-ISP, I was in situation b) above.
My problem was related to DNS - they seemed to have multiple DNS floating around
and my domain had not been deleted from one of them. I only found out by
accident, when a friend who was a customer of another ISP owned by the same
Telco, informed me my email address bounced. My problem was 
explaining/demonsrating the
problem to the ISP and filling in a few gaps to point at the cause, based on my 
knowledge of
the history of the ISPs involved. Ofcourse emails from me to them worked and 
kind of went against what I was saying.

Before naming and shaming them you could have threatened to report them to the
TIO. This worked wonders for me on a banking matter with a threat of reporting
the bank to the Banking Ombudsman. Anyone had any experience of the TIO?
<http://www.tio.com.au/search/docs_search_engine.asp?strAbsolutePage=1>

Marghanita

-- 
Marghanita da Cruz
http://www.ramin.com.au
Phone: (+61)0414 869202