<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>I think you're reading far too much into this.</div>
<div><br>
</div>
<div>If you spam, and you cause abuse tickets, your IP is probably going to get blocked.</div>
<div><br>
</div>
<div>If you host questionable content (and its not "controversial viewpoints" - I'm talking the stuff we all know should not even exist, let alone be on the web), your IP is probably going to get blocked.</div>
<div><br>
</div>
<div>If you run an open DNS resolver and you participate in DDOS activity, your IP is probably going to get blocked.</div>
<div><br>
</div>
<div>If you participate in port scanning activities and trigger alarms from overseas honeypots and dark nets, your IP is probably going to get blocked.</div>
<div><br>
</div>
<div>Most networks have acceptable usage policies, and if they don't, their upstream providers probably do. If activity on a shared host triggers any sort of alarms upstream, it's generally easier to act first and ask questions later to contain the amount of
background noise we already have on an increasingly noisy Internet. </div>
<div><br>
</div>
<div>If your content is important and you're worried about impact to service due to shared hosting activity, put it on a dedicated host. You get what you pay for. Buyer beware. Etc etc.</div>
<div><br>
</div>
<div>They should be taking this up with their host, and their host with their NSPs. If the content is that important, move it to a new IP and update your DNS record.</div>
<div><br>
</div>
<div>There's no government conspiracy and nothing to see here.</div>
<div><br>
</div>
<div>Macca</div>
<div>Someone who blocks hosts that shit up the Internet from time to time</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Danny O'Brien <<a href="mailto:danny@spesh.com">danny@spesh.com</a>><br>
<span style="font-weight:bold">Date: </span>Saturday, 13 April 2013 12:56 PM<br>
<span style="font-weight:bold">To: </span>Nathan Nogic <<a href="mailto:nathan@mds.au.com">nathan@mds.au.com</a>><br>
<span style="font-weight:bold">Cc: </span>"<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [AusNOG] Understanding lack of Aus connectivity to melbournefreeuniversity.org.<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">On Fri, Apr 12, 2013 at 7:40 PM, Nathan Nogic <span dir="ltr"><<a href="mailto:nathan@mds.au.com" target="_blank">nathan@mds.au.com</a>></span> wrote:<br>
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-AU">
<div>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Hi Danny,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Re your question, absolutely, every carrier that has a telco licence is, by law, required to provide interception capabilities to comply with lawful
direction from the courts or a number of law enforcement agencies as a condition of their telco licence. That also governs what they can and can’t say just like any other action taken on behalf of law enforcement or in compliance with a court order.</span></p>
</div>
</div>
</blockquote>
<div><br>
Just to be clear, again. I understand the procedure for an interception warrant, and the judicial oversight that takes place under those conditions, which are carefully spelled out in the Act.<br>
<br>
What we're apparently talking about here, however, is an ad hoc government process to *block* an IP, which has no such clear process defined in law, has been an extremely controversial topic in Australia as elsewhere (leading to the recent abandonment of a
proposed mandatory blacklist regime in favour of a voluntary ISP agreement), has clear risks of overreach and collateral damage (almost certainly what we're seeing here), and, it is being implied here, being conducted under the terms of a private agreement
the details of which no-one has yet made public. <br>
<br>
Was the judge in this case made aware of the collateral damage of the order they were signing? Was a judge involved at all? If it was solely the act of the Attorney-General, what is the process to ensure that this is proportional?<br>
<br>
Even if the terms of this particular order are secret, it would seem to be extremely unlikely (and very worrying) if the process to conduct these blocks is entirely secret, and kept secret and separate from the pre-existing blacklist agreements. Is the process
documented, as seems to be indicated by 314(3)? Can we see this documentation?<br>
<br>
d.<br>
<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-AU">
<div>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">At the risk of going off on a tangent, while I can understand why this debate stirs up emotion, what I’m keen to understand from members of this
group is why, because it relates to the internet, the emotional response seems to be much greater than if a law enforcement organisation (or any organisation complying with a court order) enforces a legally binding request to do just about anything else that
affects shared infrastructure in society at large.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">My guess is that we feel that freedom of expression and access to information on the internet should override certain obligations (not saying I support
mandatory filtering, etc), however, I suspect that we overlook countless incidents on a daily basis which now fall into the same ‘societal infrastructure’ category as the internet. On a daily basis Police shut down a roads to stop motorists getting to the
scene of a crime or accident, restrict access to public or private premises for any number of reasons, tap phone lines to listen in on criminal organisations, etc but we don’t see the same sort of response. I suspect that’s because actions on these public
utilities has become ingrained within society as part of our day to day lives and an accepted level of law enforcement action is considered normal for the safe and smooth running of society in general. I’m not sure this attitude has translated to the internet
as yet (or ever will).<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">The facts that we know is that ultimately, we don’t know why or who the block was targeted at other than the IP address and why enforcement was only
taken up by specific ISPs. That could have been haphazard filtering or it could have been targeted at certain end users. Without specific information, we don’t, and most probably will never, know any other circumstances surrounding the action and that is probably
not going to change unless it gets to court and someone reads the transcripts (not me!)
</span><span style="font-size:11.0pt;font-family:Wingdings;color:#1f497d">J</span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">.
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Cheers<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Nathan
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; " lang="EN-US">From:</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif; " lang="EN-US"><a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>
[mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Danny O'Brien<br>
<b>Sent:</b> Saturday, 13 April 2013 12:11 PM<br>
<b>To:</b> Bevan Slattery</span></p>
<div class="im"><br>
<b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] Understanding lack of Aus connectivity to <a href="http://melbournefreeuniversity.org" target="_blank">
melbournefreeuniversity.org</a>.<u></u><u></u></div>
<p></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Fri, Apr 12, 2013 at 6:28 PM, Bevan Slattery <<a href="mailto:bevan@slattery.net.au" target="_blank">bevan@slattery.net.au</a>> wrote:<u></u><u></u></p>
<div>
<div>
<div class="im">
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Nope – wrong. You get a notice to block. You block or either get fined, go to jail or lose your carrier licence. It is a blunt instrument and it is a condition of being
at "the big boys table" i.e. you're a carrier or a carriage service provider. You don't ask too many questions, you don't post it to Ausnog and have a decision by committee. You block the IP address as you are required to by law and you do it immediately.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; "><u></u> <u></u></span></p>
</div>
</div>
</blockquote>
</div>
<div>
<div class="im">
<p class="MsoNormal"><br>
Bevan, <br>
<br>
Just to clarify here: are you saying there is an established process under the Telecommunications Act whereby Internet ISPs in Australia have been required to block specific IPs by law enforcement, with a secrecy requirement attached? And that's it's separate
from the voluntary, DNS, filter agreed to by some ISPs?<br>
<br>
It would seem, given the extremely strong public reaction to the public filter proposals, that this might be something of a matter of public interest. At the very least, it would be hard to keep a list of /32 blackholes secret, given the number of people that
BGP feed might be shared with. Are internal BGP route databases also covered by this secrecy requirement?<br>
<br>
d.<u></u><u></u></p>
</div>
<p class="MsoNormal"><br>
<snip><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</span>
</body>
</html>