<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>認證信 &#8211; richliu&#039;s blog</title>
	<atom:link href="https://richliu.com/tag/%e8%aa%8d%e8%ad%89%e4%bf%a1/feed/" rel="self" type="application/rss+xml" />
	<link>https://richliu.com</link>
	<description>Linux, 工作, 生活, 家人</description>
	<lastBuildDate>Sun, 01 May 2011 08:13:35 +0000</lastBuildDate>
	<language>zh-TW</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>
	<item>
		<title>收不到網樂通的認證信.</title>
		<link>https://richliu.com/2011/05/01/1060/%e6%94%b6%e4%b8%8d%e5%88%b0%e7%b6%b2%e6%a8%82%e9%80%9a%e7%9a%84%e8%aa%8d%e8%ad%89%e4%bf%a1/</link>
					<comments>https://richliu.com/2011/05/01/1060/%e6%94%b6%e4%b8%8d%e5%88%b0%e7%b6%b2%e6%a8%82%e9%80%9a%e7%9a%84%e8%aa%8d%e8%ad%89%e4%bf%a1/#comments</comments>
		
		<dc:creator><![CDATA[richliu]]></dc:creator>
		<pubDate>Sun, 01 May 2011 07:43:08 +0000</pubDate>
				<category><![CDATA[KUSO]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[問題]]></category>
		<category><![CDATA[笑話]]></category>
		<category><![CDATA[網樂通]]></category>
		<category><![CDATA[認證信]]></category>
		<guid isPermaLink="false">https://richliu.com/?p=1060</guid>

					<description><![CDATA[<p>我因為一直沒有收到網樂通的認證信, 打去網樂通的客服&#8230;&#8230; 客服: &#8220;劉先生 [&#8230;]</p>
<p>The post <a rel="nofollow" href="https://richliu.com/2011/05/01/1060/%e6%94%b6%e4%b8%8d%e5%88%b0%e7%b6%b2%e6%a8%82%e9%80%9a%e7%9a%84%e8%aa%8d%e8%ad%89%e4%bf%a1/">收不到網樂通的認證信.</a> appeared first on <a rel="nofollow" href="https://richliu.com">richliu&#039;s blog</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>我因為一直沒有收到網樂通的認證信, 打去網樂通的客服&#8230;&#8230;</p>
<p>客服: &#8220;劉先生, 請問你是使用什麼信箱&#8221;<br />
&#8221; xxxxxx@poorman.org&#8221;<br />
客服: &#8220;劉先生, 有些信箱會擋我們的 e-mail , 你有沒有其他的信箱呢&#8221;<br />
客服: &#8220;像是 hotmail, pchome 或是 gmail 之類的&#8221;<br />
&#8220;xxxxx@gmail.com&#8221;<br />
客服: &#8220;劉先生, 請問一下您是使用什麼瀏覽器收信呢&#8221;<br />
&#8220;我是使用 Firefox 收信&#8221;<br />
客服: &#8220;劉先生, 對不起, Firefox 可能收不到我們的認證信哦, 請你改用 IE 瀏覽器去收一下, 謝謝&#8221;</p>
<p>囧到一個極點, 根本不想解釋給客服小姐聽..<br />
<span id="more-1060"></span><br />
剛剛查了一下我 mail server 上的 log. </p>
<p>[TEXT]<br />
May  1 05:27:17 bbs postfix/smtpd[16929]: connect from unknown[80.77.6.55]<br />
May  1 05:27:17 bbs postfix/smtpd[16929]: NOQUEUE: reject: RCPT from unknown[80.77.6.55]: 450 4.7.1 Client host rejected: cannot find your hostname, [80.77.6.55]; from=<no -reply@ebill.nextvod.com.tw> to=<xxxxxxx @poorman.org> proto=ESMTP helo=<win -VIGGVUC35LG><br />
May  1 05:27:17 bbs postfix/smtpd[16929]: disconnect from unknown[80.77.6.55]<br />
[/TEXT]</p>
<p>查一下 ebill.nextvod.com.tw 在那邊?<br />
[TEXT]<br />
# dig ebill.nextvod.com.tw</p>
<p>; < <>> DiG 9.6.1-P3 < <>> ebill.nextvod.com.tw<br />
;; global options: +cmd<br />
;; Got answer:<br />
;; ->>HEADER< <- opcode: QUERY, status: NOERROR, id: 11882
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;ebill.nextvod.com.tw.          IN      A

;; ANSWER SECTION:
ebill.nextvod.com.tw.   3600    IN      A       63.221.156.74

;; AUTHORITY SECTION:
nextvod.com.tw.         46663   IN      NS      ns1.nextvod.com.tw.
nextvod.com.tw.         46663   IN      NS      ns.nextvod.com.tw.

;; ADDITIONAL SECTION:
ns.nextvod.com.tw.      58730   IN      A       218.211.37.1

;; Query time: 14 msec
;; SERVER: 168.95.1.1#53(168.95.1.1)
;; WHEN: Sun May  1 15:32:43 2011
;; MSG SIZE  rcvd: 105
[/TEXT]

查一下 63.221.156.75 
[TEXT]
# whois 63.221.156.74
#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 63.221.156.74"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=63.221.156.74?showDetails=true&#038;showARIN=false
#

NetRange:       63.216.0.0 - 63.223.255.255
CIDR:           63.216.0.0/13
OriginAS:
NetName:        BTN-CIDR5
NetHandle:      NET-63-216-0-0-1
Parent:         NET-63-0-0-0-0
NetType:        Direct Allocation
Comment:        ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:        1999-12-09
Updated:        2004-11-12
Ref:            http://whois.arin.net/rest/net/NET-63-216-0-0-1

OrgName:        Beyond The Network America, Inc.
OrgId:          BNA-42
Address:        450 Springpark PL
Address:        Suite 100
City:           Herdon
StateProv:      VA
PostalCode:     20170
Country:        US
RegDate:        2004-05-25
Updated:        2009-02-04
Ref:            http://whois.arin.net/rest/org/BNA-42

OrgTechHandle: PUN6-ARIN
OrgTechName:   PCCW US NOC
OrgTechPhone:  +1-703-621-1637
OrgTechEmail:  usnoc@pccwglobal.com
OrgTechRef:    http://whois.arin.net/rest/poc/PUN6-ARIN

OrgTechHandle: CDO54-ARIN
OrgTechName:   Downes, Chris
OrgTechPhone:  +1-703-621-1619
OrgTechEmail:  cdownes@pccwglobal.com
OrgTechRef:    http://whois.arin.net/rest/poc/CDO54-ARIN

OrgAbuseHandle: PAD13-ARIN
OrgAbuseName:   PCCW AUP Department
OrgAbusePhone:  +1-703-621-1637
OrgAbuseEmail:  probinson@pccwglobal.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/PAD13-ARIN

OrgNOCHandle: PUN6-ARIN
OrgNOCName:   PCCW US NOC
OrgNOCPhone:  +1-703-621-1637
OrgNOCEmail:  usnoc@pccwglobal.com
OrgNOCRef:    http://whois.arin.net/rest/poc/PUN6-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
[/TEXT]

查一下 80.77.6.55 Whois 
[TEXT]
# whois 80.77.6.55
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '80.77.6.0 - 80.77.6.255'

inetnum:        80.77.6.0 - 80.77.6.255
netname:        QUICK
descr:          Quivk Link
country:        EG
admin-c:        BIJA1-RIPE
tech-c:         BIJA1-RIPE
status:         ASSIGNED PA
mnt-by:         FLAG-MNT
source:         RIPE # Filtered

person:         Bijal Sanghani
address:        Flag Telecom
address:        London
phone:          +44 208 282 0068
e-mail:         bsanghani@flagtelecom.com
nic-hdl:        BIJA1-RIPE
mnt-by:         FLAG-MNT
source:         RIPE # Filtered

% Information related to '80.77.0.0/20AS15412'

route:        80.77.0.0/20
descr:        Route for FLAG Telecom - Egypt
origin:       AS15412
mnt-by:       FLAG-MNT
source:       RIPE # Filtered
[/TEXT]

ebill.nextvod.com.tw 那個 IP 看起來是正常的, 因為是從 PCC 送過來的
PCC 是香港商電訊盈科.
但是實際怎麼樣, Route for FLAG telecom Egypt 寄認證信給我 ????

難道是被 hacker? 

最後補上 nmap 的資料
[TEXT]
# nmap -sT 80.77.6.55 -O

Starting Nmap 5.51 ( http://nmap.org ) at 2011-05-01 15:40 CST
Nmap scan report for 80.77.6.55
Host is up (0.090s latency).
Not shown: 998 closed ports
PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows 2008|7|Vista (94%), FreeBSD 6.X (89%), OpenBSD 4.X (87%), AirSpan embedded (87%)
Aggressive OS guesses: Microsoft Windows Server 2008 Beta 3 (94%), Microsoft Windows Server 2008 SP2 (93%), Microsoft Windows Server 2008 (91%), Microsoft Windows 7 (91%), Microsoft Windows Vista SP0 or SP1, Server 2008 SP1, or Windows 7 (91%), Microsoft Windows Server 2008 R2 (90%), Microsoft Windows 7 Professional (89%), FreeBSD 6.2-RELEASE (89%), FreeBSD 6.3-RELEASE (89%), OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 6.64 seconds
ms1 ~ # nmap -sT 63.221.156.75  -O

Starting Nmap 5.51 ( http://nmap.org ) at 2011-05-01 15:41 CST
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.54 seconds
ms1 ~ # nmap -sT 63.221.156.75  -O -Pn

Starting Nmap 5.51 ( http://nmap.org ) at 2011-05-01 15:41 CST
Nmap scan report for 63-221-156-75.static.pccwglobal.net (63.221.156.75)
Host is up (0.062s latency).
Not shown: 995 filtered ports
PORT     STATE  SERVICE
1433/tcp open   ms-sql-s
2383/tcp open   ms-olap4
3389/tcp open   ms-term-serv
5800/tcp closed vnc-http
5900/tcp closed vnc
Device type: general purpose
Running: Microsoft Windows 2003|XP
OS details: Microsoft Windows Server 2003 SP2, Microsoft Windows XP SP2 or Server 2003 SP1 or SP2

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 9.52 seconds
[/TEXT]

註: 最後換到 gmail, 而且收到認證信了, 結果認證完以後出現的帳號還是錯誤的 e-mail account. 
整個網樂通的後台一整個很糟糕. 設計這一套系統的人應該切腹了. 

</win></win></xxxxxxx></no></p>
<p>The post <a rel="nofollow" href="https://richliu.com/2011/05/01/1060/%e6%94%b6%e4%b8%8d%e5%88%b0%e7%b6%b2%e6%a8%82%e9%80%9a%e7%9a%84%e8%aa%8d%e8%ad%89%e4%bf%a1/">收不到網樂通的認證信.</a> appeared first on <a rel="nofollow" href="https://richliu.com">richliu&#039;s blog</a>.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://richliu.com/2011/05/01/1060/%e6%94%b6%e4%b8%8d%e5%88%b0%e7%b6%b2%e6%a8%82%e9%80%9a%e7%9a%84%e8%aa%8d%e8%ad%89%e4%bf%a1/feed/</wfw:commentRss>
			<slash:comments>3</slash:comments>
		
		
			</item>
	</channel>
</rss>
