New service - the Team Cymru Malware Hash Registry!

[Martin.Hepworth]

Could well be...my DNS forwarder is a well known company in Carlow, as my normal ISP (based in Texas) DNS server can be poor as the latency hits us bad (Oxford,UK to Dallas). Not seen any timeouts myself, just seems noticably (but only just) slower than before. I'll keep my eye on this.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> Of Steve Freegard
> Sent: 28 October 2008 16:23
> To: MailScanner discussion
> Subject: Re: New service - the Team Cymru Malware Hash Registry!
>
> Hi Martin,
>
> Martin.Hepworth wrote:
> > Running here against latest beta (with freeBSD v.old and exim).
> >
> > So far so good - no hits yet so hard to say, but
> performance could be
> > an issue for people, I've noticed a marked slow down in overall
> > scanning times even with the caching DNS etc
> >
>
> It would seen that it's international bandwidth that is the issue.
>
> I wrote and tested the scanner this morning on one of the FSL
> test boxes which is in Washington DC on a 10Mb Comcast cable
> line and have yet to see a timeout.
>
> However - just tried this on my laptop:
>
> smf at laptop-smf:~$ ./generic_hash_scanner.pl *.pl
> CLEAN::File::./clear_queue_orphans.pl
> INFO::ERROR::Timed out after 30 seconds (4 remaining sockets
> waiting after 29 checks)
>
> smf at laptop-smf:~$ host -t NS hash.cymru.com hash.cymru.com
> name server ns1.hash.cymru.com.
> hash.cymru.com name server ns2.hash.cymru.com.
>
> smf at laptop-smf:~$ host ns1.hash.cymru.com ns1.hash.cymru.com
> has address 216.90.108.33
>
> smf at laptop-smf:~$ host ns2.hash.cymru.com ns2.hash.cymru.com
> has address 216.90.108.34
>
> smf at laptop-smf:~$ host -t TXT
> 34.108.90.216.asn.routeviews.org
> 34.108.90.216.asn.routeviews.org descriptive text "23028"
> "216.90.108.0"
> "24"
>
> smf at laptop-smf:~$ host -t TXT 34.108.90.216.countries.blackholes.us
> 34.108.90.216.countries.blackholes.us descriptive text "us"
>
> Looks to me like they could do with some extra mirrors
> particularly in Europe as my RTT from Zen Internet in the UK
> is > 150ms
>
> Cheers,
> Steve
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************