[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: blocking google groups [was Re: ExitPolicy abuse]





Roger Dingledine wrote:
(I assume you mean Usenet.)

Hm, this is a tricky one. For example, if Google starts filtering posts,
liability issues may come up. Also, Google tends to get bad publicity
when they do things that can be seen as "censorship."
Right, meant Usenet.. I would expect that google will also get bad publicity if they do nothing and act as an anonymous gateway for spam to usenet. The same way that TOR gets bad publicity on certain IRC networks because it is used as a gateway for abuse. Or hotmail for spam, etc, etc.

Perhaps Usenet readers will block all messages from google.com, similar to how some IRC networks block all connections for TOR nodes...

So until google fixes the problem, I've rejected access to google's network. I don't know how many ways groups.google.com may be accessed, but my first stab is to block 216.239.37.0/24 , which contains the 3 servers listed right now in DNS.

Ok, but groups.google.com is an alias for groups.google.akadns.net,
which doesn't bode well for easily enumerating its addresses. :)
dig groups.google.com gives:

;; ANSWER SECTION:
groups.google.com.      860     IN      CNAME   groups.google.akadns.net.
groups.google.akadns.net. 216   IN      A       216.239.37.104
groups.google.akadns.net. 216   IN      A       216.239.37.99
groups.google.akadns.net. 216   IN      A       216.239.37.147

I can confirm that when I load a browser and type in "groups.google.com", it connected to one of those IP addresses.. So the exitpolicy block should work...


regards, Valient