Your server has been permanently banned for providing falsified information.

[JERIC]

Our server was attacked last night with 100MBit inbound traffic for several hours. It of course eventually brought it down. As a result I have installed Sygate Firewall in attempt to prevent this from occurring again. Now that the server is running again I noticed the banned messages in each of our 2 SHOUTcast server logs. I think this could because of the actual attack on us or because of the firewall install/configuration.

I would appreciate if the higher powers could unban our IPs and/or advise me of anything I need to do. I can provide proof of us being attacked if desired. The IPs are:

64.62.253.23
64.62.253.31

TIA

<08/15/04@23:14:43> [dest: 65.95.12.153] connection closed (92 seconds) (UID: 10)[L: 9]{Bytes: 995578}(P: 7)
<08/15/04@23:14:57> [yp_tch] yp.shoutcast.com touched!
<08/15/04@23:15:22> [dest: 61.202.5.100] starting stream (UID: 13)[L: 10]{A: iTunes/2.0.4 (Macintosh; N; PPC)}(P: 7)
<08/15/04@23:15:46> [dest: 64.146.71.134] starting stream (UID: 14)[L: 11]{A: xmms/1.2.10}(P: 10)
<08/15/04@23:17:10> [dest: 64.250.220.212] starting stream (UID: 15)[L: 12]{A: WinampMPEG/5.0}(P: 11)
<08/15/04@23:18:06> [dest: 66.74.1.162] starting stream (UID: 16)[L: 13]{A: WinampMPEG/5.0}(P: 12)
<08/15/04@23:18:08> [dest: 24.12.28.35] starting stream (UID: 17)[L: 14]{A: WinampMPEG/5.0}(P: 13)
<08/15/04@23:18:16> [dest: 24.12.28.35] connection closed (7 seconds) (UID: 17)[L: 13]{Bytes: 245760}(P: 13)
<08/15/04@23:18:24> [dest: 12.47.98.180] starting stream (UID: 18)[L: 14]{A: WinampMPEG/5.0}(P: 13)
<08/15/04@23:19:50> [dest: 64.250.220.212] connection closed (161 seconds) (UID: 15)[L: 13]{Bytes: 1449984}(P: 11)
<08/15/04@23:20:15> [dest: 65.95.12.153] starting stream (UID: 19)[L: 14]{A: NSPlayer/9.0.0.2980 WMFSDK/9.0}(P: 11)
<08/15/04@23:22:54> [dest: 218.104.206.84] starting stream (UID: 20)[L: 15]{A: WinampMPEG/5.0}(P: 14)
<08/15/04@23:23:25> [dest: 128.46.190.77] starting stream (UID: 21)[L: 16]{A: WinampMPEG/2.8 mp3PRO/1.2}(P: 15)
<08/15/04@23:23:44> [dest: 64.250.220.212] starting stream (UID: 22)[L: 17]{A: WinampMPEG/5.0}(P: 16)
<08/15/04@23:24:44> [dest: 213.13.192.122] starting stream (UID: 23)[L: 18]{A: WinampMPEG/2.8 mp3PRO/1.2}(P: 17)
<08/15/04@23:24:57> [yp_tch] yp.shoutcast.com touched!
<08/15/04@23:25:48> [dest: 203.177.127.218] starting stream (UID: 24)[L: 19]{A: WinampMPEG/2.7 mp3PRO/1.0}(P: 18)
<08/15/04@23:25:49> [dest: 64.250.220.212] connection closed (125 seconds) (UID: 22)[L: 18]{Bytes: 1187840}(P: 16)
<08/15/04@23:26:39> [dest: 64.250.220.212] starting stream (UID: 25)[L: 19]{A: WinampMPEG/2.8 mp3PRO/1.2}(P: 16)
<08/15/04@23:26:56> [dest: 64.250.220.212] connection closed (17 seconds) (UID: 25)[L: 18]{Bytes: 270336}(P: 16)
<08/15/04@23:27:46> [dest: 64.250.220.212] starting stream (UID: 26)[L: 19]{A: WinampMPEG/2.8 mp3PRO/1.2}(P: 16)
<08/15/04@23:28:32> [dest: 65.95.12.153] connection closed (497 seconds) (UID: 19)[L: 18]{Bytes: 4231001}(P: 11)
<08/15/04@23:29:11> [dest: 218.139.170.91] starting stream (UID: 27)[L: 19]{A: iTunes/4.6 (Windows; N)}(P: 11)
<08/15/04@23:29:13> [dest: 218.139.170.91] connection closed (1 seconds) (UID: 27)[L: 18]{Bytes: 40960}(P: 11)
<08/15/04@23:29:14> [dest: 218.139.170.91] starting stream (UID: 28)[L: 19]{A: iTunes/4.6 (Windows; N)}(P: 11)
<08/15/04@23:30:23> [dest: 202.145.73.165] starting stream (UID: 29)[L: 20]{A: WinampMPEG/5.0}(P: 19)
<08/15/04@23:31:35> [dest: 65.95.12.153] starting stream (UID: 30)[L: 21]{A: NSPlayer/9.0.0.2980}(P: 20)
<08/15/04@23:31:35> [dest: 65.95.12.153] connection closed (0 seconds) (UID: 30)[L: 20]{Bytes: 8192}(P: 20)
<08/15/04@23:31:35> [dest: 65.95.12.153] starting stream (UID: 31)[L: 21]{A: NSPlayer/9.0.0.2980 WMFSDK/9.0}(P: 20)
<08/15/04@23:31:36> [dest: 65.95.12.153] connection closed (1 seconds) (UID: 31)[L: 20]{Bytes: 16384}(P: 20)
<08/15/04@23:31:36> [dest: 65.95.12.153] starting stream (UID: 32)[L: 21]{A: NSPlayer/9.0.0.2980 WMFSDK/9.0}(P: 20)
<08/15/04@23:31:37> [dest: 24.158.78.192] starting stream (UID: 33)[L: 22]{A: RMA/1.0 (compatible; RealMedia)}(P: 21)
<08/15/04@23:31:59> [dest: 24.158.78.192] connection closed (23 seconds) (UID: 33)[L: 21]{Bytes: 436977}(P: 21)
<08/15/04@23:32:00> [dest: 24.158.78.192] starting stream (UID: 34)[L: 22]{A: RMA/1.0 (compatible; RealMedia)}(P: 21)
<08/15/04@23:33:58> [dest: 130.155.199.156] starting stream (UID: 35)[L: 23]{A: RMA/1.0 (compatible; RealMedia)}(P: 22)
<08/15/04@23:34:34> [dest: 24.200.165.48] starting stream (UID: 36)[L: 24]{A: WinampMPEG/2.7}(P: 23)
<08/15/04@23:34:58> [yp_tch] yp.shoutcast.com gave error (nak)
<08/15/04@23:34:58> [yp_tch] yp.shoutcast.com gave extended error (Your server has been permanently banned for providing falsified information.)

[JERIC]

The problem is fixed. Not sure if it was by itself or if someone helped me. Thanks if someone did. Sorry to bug ya if not.

[JERIC]

I've been banned again. I don't know why.

[djmastermind]

Check out the Sticky post titled:
SHOUTcast: Important Info & Answers to FAQs. READ ME!

Scroll down to the last post.

[Jay]

you being banned has no relation to you. Someone on your subnet was banned.

[rokkyu]

So that 1 someone who was acting stupid screws it up for all of us?? Man this blows I was in the middle of a phone interview and i did not archive my stream. Is there anyway to find and ban that one person?

thanks,

rokkyu

[drewbar]

Streams are absed on subnet and not individual IPs. No. (And it won't change).

[Jay]

eh no. The system bans by subnet only due to resource limitations.

[JERIC]

Is there any chance of getting my IPs excluded from the ban by overwriting the subnet ban? I understand SHOUTcast is a free service and you have to protect its integrity. I've enjoyed watching my station grow the past three years mostly because of it. I need to know now if it's time for me to move on or should I wait for the dust to settle. Please advise.

[Jay]

no there are no white lists, a banned subnet is just that, banned.

[JERIC]

Thanks. Could you adress the second part of my last post? I am not in any violation of the rules mentioned in the sticky. Can you unban me please? I run a very reputible service Jay, you should know that. I see Louis issue was resolved. Is there any chance mine can be as well? If not, I would appreciate if you would let me know too. TIA

[Jay]

Originally posted by KXRM
you being banned has no relation to you. Someone on your subnet was banned.

[JERIC]

That doesn't help me. What you are saying is you don't want to unban my subnet? Why? Am I supposed to feel better because it has "no relation to me"? I'm afraid it directly impacts me and you are avoiding the questions here. I realize how and why it happened but what are we going to do about it is my concern. I appreciate your time.

[Jay]

well if you don't want it to affect you then it may be best to switch subnets.

[bitrany]

Hello,

Our entire 64.62.253.XX subnet is still banned.

We host hundreds of shoutcast clients on this subnet and this is causing us great business damage.

It is very unlikely we can change the entire subnet.

Please let me know how can we resolve this situation or who can we email to discuss this issue.

Regards,

Jonathan
EGIHosting.com
http://www.egihosting.com

[DJ Matt]

This is not just EGI hosting, this is also ALL audiorealm streaming customers too. I realize this is a free service also, but if SHOUTcast doesn't unban a few hosts there will be a lot of people very angry with them.

[Jay]

as stated in the original post by clickbutt, this issue as been resolved. those under that subnet have been unbanned for several hours now. Please be patient. Unbans take several hours to propagate to the yp.

Also I would like for it to be known that this service is run mainly by volunteers. Please do not think that we have nothing better to do all day then to watch the yp.

[DJ Matt]

Thank you!

Is this a software thing or what, because its always subnet bans, not IP bans, can't hosts be banned? Or possibly banning people based on what the source's IP addess is that's connecting to the DNAS?

[Jay]

Originally posted by KXRM
eh no. The system bans by subnet only due to resource limitations.

[DJ Matt]

aw, that's a real bummer

it's only a 90 listener server, so since i've got 470 other people listening that are showing up i'm happy

[phluidvision]

I have to further the complaints made on this thread... we run a perfectly reputable and respectable station and find it outrageous that nullsoft would respond by asking us to change subnets. "Free service" or no "free service", it's still a "service" and proper notification of these sorts of issues or even a simple Response from anyone who may have any clue as to how to rectify the problems in a simple manner is the least that should be expected from any reputable "service" provider.
A whole day of shows have been disrupted for us now and we have no idea of A.) What we may or may not have done wrong, B.) When we will have service returned to us and C.) Why all of us little stations should have to suffer because of one single dipstick with a spamming manual? Somebody please respond with some sort of seed of hope as we are seriously considering changing Casting service provider.

[bitos]

Hi,

We host several Shoutcast servers on our subnet: 213.186.63.0
It seems that one of these servers has been banned resulting in a full ban of our subnet. This is a very dispointing situation because none of our hosted webradios is sable to use the YP service. Could you please unban this subnet ?

Thanks

[Jay]

all:

You should contact either me, CraigF or Germ privately regarding bans.

[CraigF]

Originally posted by phluidvision
I have to further the complaints made on this thread... we run a perfectly reputable and respectable station and find it outrageous that nullsoft would respond by asking us to change subnets.

That isnt in dispute.

"Free service" or no "free service", it's still a "service" and proper notification of these sorts of issues or even a simple Response from anyone who may have any clue as to how to rectify the problems in a simple manner is the least that should be expected from any reputable "service" provider.

This has been answered many times before. We cannot be expected to contact people before they are banned with some kind of warning because simply, we do not have your contact details at hand. No exchange of details is required for you to list in the YP. You could argue that we could contact the abuse@ email address listed for that particular subnet in either ARIN/APNIC/RIPE/etc, however, this is more often than not NOT the person you actually need to speak to.

Additionally, we dont get paid to do this, and our time and resources is stretched as is.

A whole day of shows have been disrupted for us now

Better monitoring of your own clients is a posibility here. You have an appropriate relationship with them, where as we dont. Compare their streams against the rules already posted to these forums and you can better ensure that you are not banned from the YP.

A.) What we may or may not have done wrong

Asking either myself, KXRM or Germ can give you that information, however, in some cases this can be incomplete. In most cases where banning is dubious, the ban will be reversed without question.

B.) When we will have service returned to us

When the original offender is no longer attempting to list in the YP. If we remove the ban, and the offending listing comes back, we ban again.

C.) Why all of us little stations should have to suffer because of one single dipstick with a spamming manual?

Well, if YOU are a shoutcast stream hoster, it is YOUR job to monitor YOUR clients. You are the ones making money out of this, use some of those profits to better protect yourself and your clients.

If you are using a stream hoster who has a subnet banned due to another of their clients, then it is an issue you need to take up with your shoutcast provider. (see above for what your provider should be doing).

Somebody please respond with some sort of seed of hope as we are seriously considering changing Casting service provider.

If your casting provider is unwilling to chase up why their subnets are being banned from the YP, then your only option is to jump to another provider. They lose your money, and hopefully, when it hits their cashflow, they will pull their fingers out of their asses and start monitoring what their clients are doing.