[tor-relays] What to do about icecat.biz abuse complaints?

[Steve Snyder]

I'm using the Reduced Exit Policy (see: https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy?format=txt) which does include port 8000, but shows that service as iRDMI.

I usually associate "streaming software" with video or audio.  What icecat.biz does (I have had to learn much more than I wanted to about them) is to provide manufacturer's documentation.  I guess the "cat" is for catalog.

Blocking the IP associated with icecat.biz is the first thing I did.  That didn't stop the abuse reports.  It seems that they have servers distributed all over the world, and the reports don't say what server experienced the abuse.

Thanks for the response.

On Saturday, April 14, 2012 7:32am, "Daniel Case" <danielcase10 at gmail.com> said:

> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> If I recall correctly, icecast is streaming software that runs on port
> 8000. I assume that someone through your node is trying to "rip" the
> content, which is what the "RIP Attempt" would be. (Not sure where you got
> the info that it is too many connections?)
> 
> If you block port 8000, that could stop people accessing the streaming
> software without too many adverse affects on other services. Alternatively
> you can just block icecast.biz (I noticed there isn't a web server on there
> though)
> 
> Daniel
> 
> 
> 
> On 14 April 2012 13:15, Steve Snyder <swsnyder at snydernet.net> wrote:
> 
>> I often get abuse complaints from icecat,biz saying that a "RIP attempt"
>> was seen from the IP address of my exit node.  Apparently this involves too
>> many connections in a given period of time.
>>
>> I've tried to contact them but get no answer from the e-mail address
>> included in the abuse reports.  The Administrator listed in the icecat.bizwhois
>> says he just provides the network and can't provide any info about
>> the company or who to contact within it.
>>
>> The abuse reports each say that my IP address will be blacklisted for a
>> week.  Fine with me. I'd just as soon they blacklist it forever but as they
>> are unresponsive to e-mail communication I can't tell them that.
>>
>> Short of turning my exit node into a middle node, what can I do about
>> these frequent abuse reports?
>>
>>
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays at lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
>