Categories
Announcements Status

Potential Spam Issue with Account Emails

This morning we received a disturbing report of a potential issue: a customer with an email address unique to our service received a spam message at that address. Throughout the day we subsequently received two more identical reports leading us to believe there is a potential issue. We are extremely disappointed that information associated with Roller Network may have been leaked in any manner, whether it’s our fault or not, tarnishing our otherwise flawless record up to this point.

The only common thread that these reports have is that they have submitted a payment via our merchant account, which is the only time an email address in our database was associated to something outside of our account control center. As a precaution we are no longer submitting email addresses with transactions of any type; we have changed our side to send a generic email address under our domain. It is unique (just created today) in case we should see any activity at it. While we have notified our card processor of a potential problem, we have not been able to confirm it with them at this time.

If you have used a unique email address with our services, please report spam to us immediately. Specifically, we are interested in accounts that used different billing and contact addresses. If the billing email address received this spam while the contact address did not, then we can narrow our investigation. Please send them to our support address.

Spam Details

The type of spam that is being propagated to the unique addresses is specific and virtually identical, but uses some phrasing variations to evade content filters. A sample of one of the reported spams is as follows:

Hey.
I am contacting you regarding your adult profile.
I find your message on adult site nice.
I am nice looking female. I am moving to your place in few weeks.
and searching for a male to show me the place.
We could see if we have the chemistry between us.
I am sending you my snap.
I am coming from Russia.
I'm outty

Another variation might be:

Wassup?
I am contacting you regarding your adult profile.
I find your message on adult site interesting.
I am pretty looking lady. I am coming to your place in few weeks.
and looking for a guy to show me around.
This way we could discover each other.
I am sending you my photo.
I am coming from Russia.
See ya

In all cases the spam has been sourced from throwaway Hotmail addresses and includes an image attachment. We have verified that the test accounts we maintain – at the time of this writing – have not logged any attempts with hotmail addresses or spam of this nature.

Our Policy

Roller Network as does not (and will never) sell or distribute email addresses from our records; we do not employ any marketing or sales staff. The database that holds account information is not directly accessible over the internet, and operates within a extremely limited scope of access from systems that do. Most notably it is only accessible via the account control center, and never as a whole. All database queries consist of the account’s unique ID and use prepare/execute with bind values. Also, the forums and this newspipe are explicitly independent for reasons such as this. However, we are checking the account control center as a precaution.

Our database also contains test accounts. Thus far we have not seen any matching activity on the email addresses associated with those accounts. (These accounts have never been used with live payments.)

Categories
IPv6

IANA Free Pool Down to 12, Are You Ready for IPv6?

As of October 2010 the IANA has allocated 36/8 and 42/8 to APNIC, leaving only 12 /8s left in the IPv4 free pool. So far the following /8s have been allocated to various registries throughout 2010:

1/8
14/8
27/8
31/8
36/8
42/8
49/8
50/8
101/8
107/8
176/8
177/8
181/8
223/8

If this same rate of registry allocations continues, the IPv4 free pool will be completely exhausted in 2011. Of the 12 /8s that remain, 7 of these will be allocated using the regular process, then the final 5 will be allocated simultaneously across all registries.

Have you started planning for IPv6? If your current provider for hosting, colocation, or other services are coming up for renewal, now is the time to seriously consider switching to a provider that offers native IPv6 so you can start to plan, develop, and test for the future.

Does your provider speak IPv6? Roller Network does.

Categories
Announcements

Expo Day Specials

Very soon, we’re going to be announcing some expo day specials on colocation and dedicated servers, including a referral kickback for those that don’t need these services but may know someone who does. We won’t be posting them online, however, they will be exclusively by email to accounts with a contact preference of “you can contact me”. These specials will also be available at our expo booth.

Categories
Status

Array BBU on “mail2”

This morning we received a diagnostic notification from the array controller for MX record mail2.rollernet.us that the battery backup unit (BBU) heath check had failed. As such, we will be replacing it ASAP as an emergency maintenance event. There is no major operational impact from this event as the array continues to operate in a failsafe mode without its write cache enabled. We will update this post when we set a time to replace the BBU.

[20100914 11:53] The replacement battery has arrived. We are preparing to remove the affected server from the rack; replacing the BBU requires the server to be powered down.

[20100914 12:07] BBU replacement in progress.

[20100914 12:21] BBU replacement complete.

Categories
Announcements Changes

New: Mail Box Protocol Control

We’ve added a new, simple feature that allows a hosted mail box to limit whether or not IMAP or POP3 connections are allowed.  This is controlled through two new options in the actions selector for each mail box:

Mail Box Protocol Control

Attempting to access a mail box using a disabled protocol will result in an authentication failure. The default is to allow both protocols. Disabling IMAP will also disable webmail since it’s an IMAP client.