<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I'd hazard a guess that the 20,000 hits were connections from extel's
router across the tunnel to the watchguard server for the 198 filtered
IP's.<br>
This however wouldn't mean they were banned content, just that people
accessed content that was on an IP with <i>some</i> banned content.<br>
(For all we know one of the blocked urls could've been a picture on
wikipedia etc: if this was the case all traffic for that one server
passes via the watchdog server and only the prohibited url gets blocked)<br>
<br>
I explained and linked the original extel explanation of the filter
here: <a
href="http://techwiredau.com/2009/05/extel-conclude-isp-level-filtering-feasible/comment-page-1/#comment-9035">http://techwiredau.com/2009/05/extel-conclude-isp-level-filtering-feasible/comment-page-1/#comment-9035</a><br>
<br>
Regards,<br>
Andrew Cox<br>
AccessPlus HNA<br>
<br>
Colwell, Scott wrote:
<blockquote
cite="mid:1F86F5D9F6B28B4E911D7A5F44369EC703A104DB@vs23mvexc1.vpl.com.au"
type="cite">
<pre wrap="">I'd be interested in knowing whether the "20,000 hits against a
blacklist
of alleged child porn Web sites" is just 'DOS backscatter' or whether it
is
actual port 80 with a http GET to the actual URL?
And even then, malware like conficker generates this sort of traffic...
Scott
</pre>
<blockquote type="cite">
<pre wrap="">-----Original Message-----
From: <a class="moz-txt-link-abbreviated" href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>
[<a class="moz-txt-link-freetext" href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] On Behalf Of Kai
Sent: Tuesday, 5 May 2009 9:03 AM
To: <a class="moz-txt-link-abbreviated" href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a>
Subject: [AusNOG] Web filter a runaway success: Exetel
I'm sure there's more to it than this?!
Web filter a runaway success: Exetel
<a class="moz-txt-link-freetext" href="http://www.computerworld.com.au/article/301839/web_filter_runa">http://www.computerworld.com.au/article/301839/web_filter_runa</a>
way_success_exetel
_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<pre wrap=""></pre>
</blockquote>
<br>
</body>
</html>