[sanesecurity] Re: More Mysterious Messages

  • From: Gerard <gerard@xxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Tue, 2 Jun 2009 09:14:43 -0400

On Tue, 02 Jun 2009 08:27:11 -0400
Michael Lambert <lambert@xxxxxxxx> wrote:

>Can someone help me to understand why I am receiving the following
>message?  My script uses rsync compression and runs every six hours.
>
>
>
>Welcome to the Sanesecurity mirror - kindly provided by
>[sane.helljert.de]
>============================================================================
>
>In order to ensure the best performance for all mirror users and
>prevent your
>IP address being automatically banned for excessive connections, we 
>recommend that:
>
>* You only use the recommended download scripts available here:
>
>   http://www.sanesecurity.com/download_scripts_linux.htm (linux)
>   http://www.sanesecurity.com/clamav/download_scripts_win.htm
> (windows)
>
>   These scripts are frequently updated with new features/bugfixes and
>   help limit bandwidth for use on the freely provided mirrors, by 
>turning on
>   Rsync compression (-z, --compress).
>
>*  Configure your update scripts to check for new signatures *no less* 
>than once an hour.
>
>   If your client connects more than once within an hour it will be 
>automatically blocked from
>   connecting for a period of time, in order to ensure the best 
>performance for all other
>   mirrors users.
>
>Thank you for your understanding.
>
>Steve
>Sanesecurity
>===================================================================

I just did a 'whois' search on the site. This is the pertinent
information.

Found WHOIS server for .de: whois.denic.de.  Looking up.

Using 0 day old cached answer (you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more
likely that you will trigger our rate limiting system). % Copyright
(c)2008 by DENIC % Version: 1.10.0
%
% Restricted rights.
%
%
% Terms and Conditions of Use
%
% All the domain data that is visible in the whois search is protected
% by law. It is not permitted to use it for any purpose other than
% technical or administrative requirements associated with the
% operation of the Internet or in order to contact the domain holder
% over legal problems. You are not permitted to save it electronically
% or in any other way without DENIC's express written permission. It
% is prohibited, in particular, to use it for advertising or any similar
% purpose.
%
% By maintaining the connection you assure that you have a legitimate
% interest in the data and that you will only use it for the stated
% purposes. You are aware that DENIC maintains the right to initiate
% legal proceedings against you in the event of any breach of this
% assurance and to bar you from using its whois query.

Domain:      helljert.de
Nserver:     ns1.ns-serve.net
Nserver:     ns2.ns-serve.net
Status:      connect
Changed:     2008-02-19T22:53:07+01:00

[Holder]
Type:         PERSON
Organisation: Software & Computer
Pcode:        67824
City:         Feilbingert
Country:      DE
Changed:      2006-12-11T14:04:37+01:00

[Admin-C]
Type:         PERSON
Organisation: Software & Computer
Pcode:        67824
City:         Feilbingert
Country:      DE
Changed:      2006-12-11T14:04:37+01:00

[Tech-C]
Type:         PERSON
Organisation: Software & Computer
Pcode:        67824
City:         Feilbingert
Country:      DE
Phone:        +496708660045
Fax:          +496708661397
Email:        driessen@xxxxxxxx
Changed:      2006-12-11T14:04:37+01:00

[Zone-C]
Type:         PERSON
Organisation: Software & Computer
Pcode:        67824
City:         Feilbingert
Country:      DE
Phone:        +496708660045
Fax:          +496708661397
Email:        driessen@xxxxxxxx
Changed:      2006-12-11T14:04:37+01:00
 
I am going to contact the operator and see if I can persuade him to
reconfigure his server to properly send out this message.


-- 
Gerard
gerard@xxxxxxxxxxxxx

Every country has the government it deserves.

        Joseph De Maistre

Other related posts: