(Administrator)
Show profile
Link to this post
Subject: Our ISP wants us gone (apparently)
Our ISP keeps sending us vague and unhelpful complaints about 'unwanted traffic such as spam or viruses' and are threatening to cut us off if we don't fix it.
They won't tell me what the problem actually is. My requests for specifics have been ignored or unhelpfully answered. Scans find nothing on our network, and the poor guy on the phone had nothing in his script to respond with so had to keep putting me on hold only to be told we simply had to run a virus check and everything would be OK.
So someone found something that might be something (or something else)... OK, so now we're on yellow alert. What are we looking for?
Yes, you'll get that with every single browser request for a webpage. Not helpful.
This is insulting. "If you find the problem, you've found the problem."
We need to know, with great specificity, what traffic this complaint is in regards to. What's the target machine? What's the user-agent string? What kind of traffic?
Telling us a 'trojan' (which is a program we didn't mean to download and run, nothing more or less) exists and is sending 'unwanted traffic such as spam or viruses' is really just not useful. Apparently I can't talk to the abuse team on the phone, and the abuse team is unhelpfully replying to my requests for more info, and I guess the abuse team will cut off our internet if we don't do something about something.
BRB, leaping into inaction. =(
They won't tell me what the problem actually is. My requests for specifics have been ignored or unhelpfully answered. Scans find nothing on our network, and the poor guy on the phone had nothing in his script to respond with so had to keep putting me on hold only to be told we simply had to run a virus check and everything would be OK.
We have received reports from the ACMA's Australian Internet Security Initiative (AISI) that a machine accessing the Internet using your TPG Service is causing unwanted traffic to be transmitted, such as spam and viruses.
So someone found something that might be something (or something else)... OK, so now we're on yellow alert. What are we looking for?
User-Agent string for HTTP requests were observed from your connection.
Yes, you'll get that with every single browser request for a webpage. Not helpful.
If the computer(s) sending this request can be found (eg: using network traffic analysis), then that will be the infected one(s).
This is insulting. "If you find the problem, you've found the problem."
We need to know, with great specificity, what traffic this complaint is in regards to. What's the target machine? What's the user-agent string? What kind of traffic?
Telling us a 'trojan' (which is a program we didn't mean to download and run, nothing more or less) exists and is sending 'unwanted traffic such as spam or viruses' is really just not useful. Apparently I can't talk to the abuse team on the phone, and the abuse team is unhelpfully replying to my requests for more info, and I guess the abuse team will cut off our internet if we don't do something about something.
BRB, leaping into inaction. =(
BLEARGH
