[teknoids] [Important] Are you using NAT and pushing all student traffic through a single public IP address?

Elmer Masters emasters at cali.org
Fri Feb 27 11:11:09 EST 2015


And of course I mistyped. I meant to say if you and your students can get
to www.cali.org then this is NOT affecting you.
On Feb 27, 2015 10:36 AM, "Elmer Masters" <emasters at cali.org> wrote:

> Matthew,
>
> That is correct. If you and your students can get to www.cali.org then
> this is affecting you. Traffic from banned addresses is being dropped at
> the connection level so you would get a site unavailable error from your
> browser if you're trying to reach us on a banned address.
>
> It's worth noting that the vast majority of addresses that are being
> banned appear ot be coming from cable modems and other home connections.
>
> Elmer.
>
> On Fri, Feb 27, 2015 at 10:12 AM, Matthew Perna <MPerna at tourolaw.edu>
> wrote:
>
>>  Elmer if we can get to www.cali.org then we should be fine correct?
>>
>>
>>
>> *Matthew Perna *
>>
>> Director of Information Technology
>>
>> Touro Law Center
>>
>> 225 Eastview Drive
>>
>> Central Islip, NY 11722
>>
>>
>>
>> EMail:    mperna at tourolaw.edu
>>
>> Phone:   (631)  761 - 7072
>>
>> Cell:       (631)  708 - 6418
>>
>> Fax:        (631)  421 - 2675
>>
>>
>>
>> IT Support:
>>
>> TLCHelpDesk at tourolaw.edu
>>
>> (631) 761-7070
>>
>>
>>
>> *[image: Description: susse trees]*
>>
>>
>>
>> [image: dont get caught]
>>
>>
>>
>> *From:* teknoids-bounces at lists.teknoids.net [mailto:
>> teknoids-bounces at lists.teknoids.net] *On Behalf Of *Elmer Masters
>> *Sent:* Friday, February 27, 2015 9:50 AM
>> *To:* Teknoids
>> *Subject:* [teknoids] [Important] Are you using NAT and pushing all
>> student traffic through a single public IP address?
>>
>>
>>
>> Folks,
>>
>> This is a very important message as it may affect your schools ability to
>> access www.cali.org. Please make sure that this message gets to whoever
>> is in charge of the networking for your law school.
>>
>> On Monday CALI put in place a new load balancer and firewall to help
>> control a long running botnet attack against our web servers. The new set
>> up provided us with the opportunity to track a very specific attack
>> signature and block IP addresses that were sending the bad traffic. It was
>> very a successful implementation that resulted in the reduction of CPU load
>> on our web servers by about 80%.
>>
>> The thing that we did not know was that some law schools are routing all
>> student or even all law school traffic to the Internet through a single
>> public IP address. Not knowing that some schools are doing this meant that
>> a single infected machine at a school gets the entire school banned from
>> access. We have identified 2 schools that had this situation and have
>> whitelisted the IP addresses.
>>
>> If your law school uses NAT and routes all traffic through a single IP
>> address please send me the address off list so that we can whitelist it.
>> Our analytics indicate that this is likely a very small problem but we want
>> to make sure everyone has access.
>>
>> Thanks,
>>
>> Elmer.
>>
>>
>> --
>>
>> Elmer R. Masters
>> Center for Computer-Assisted Legal Instruction
>> emasters at cali.org    773-332-7508
>>
>> _______________________________________________
>> You are currently subscribed to teknoids as: emasters at cali.org.
>> To unsubscribe send a blank email to teknoids-leave at lists.teknoids.net
>> --
>> See the web interface at http://lists.teknoids.net/listinfo/teknoids to
>> get your list password, unsubscribe, and view your list settings.
>>
>
>
>
> --
> Elmer R. Masters
> Center for Computer-Assisted Legal Instruction
> emasters at cali.org    773-332-7508
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.teknoids.net/pipermail/teknoids/attachments/20150227/97390e66/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 5090 bytes
Desc: not available
URL: <http://lists.teknoids.net/pipermail/teknoids/attachments/20150227/97390e66/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 6430 bytes
Desc: not available
URL: <http://lists.teknoids.net/pipermail/teknoids/attachments/20150227/97390e66/attachment-0001.jpg>


More information about the Teknoids mailing list