收不到網樂通的認證信.

我因為一直沒有收到網樂通的認證信, 打去網樂通的客服……

客服: “劉先生, 請問你是使用什麼信箱”
” xxxxxx@poorman.org”
客服: “劉先生, 有些信箱會擋我們的 e-mail , 你有沒有其他的信箱呢”
客服: “像是 hotmail, pchome 或是 gmail 之類的”
“xxxxx@gmail.com”
客服: “劉先生, 請問一下您是使用什麼瀏覽器收信呢”
“我是使用 Firefox 收信”
客服: “劉先生, 對不起, Firefox 可能收不到我們的認證信哦, 請你改用 IE 瀏覽器去收一下, 謝謝”

囧到一個極點, 根本不想解釋給客服小姐聽..

剛剛查了一下我 mail server 上的 log.

[TEXT]
May 1 05:27:17 bbs postfix/smtpd[16929]: connect from unknown[80.77.6.55]
May 1 05:27:17 bbs postfix/smtpd[16929]: NOQUEUE: reject: RCPT from unknown[80.77.6.55]: 450 4.7.1 Client host rejected: cannot find your hostname, [80.77.6.55]; from= to= proto=ESMTP helo=
May 1 05:27:17 bbs postfix/smtpd[16929]: disconnect from unknown[80.77.6.55]
[/TEXT]

查一下 ebill.nextvod.com.tw 在那邊?
[TEXT]
# dig ebill.nextvod.com.tw

; < <>> DiG 9.6.1-P3 < <>> ebill.nextvod.com.tw
;; global options: +cmd
;; Got answer:
;; ->>HEADER< <- opcode: QUERY, status: NOERROR, id: 11882 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1 ;; QUESTION SECTION: ;ebill.nextvod.com.tw. IN A ;; ANSWER SECTION: ebill.nextvod.com.tw. 3600 IN A 63.221.156.74 ;; AUTHORITY SECTION: nextvod.com.tw. 46663 IN NS ns1.nextvod.com.tw. nextvod.com.tw. 46663 IN NS ns.nextvod.com.tw. ;; ADDITIONAL SECTION: ns.nextvod.com.tw. 58730 IN A 218.211.37.1 ;; Query time: 14 msec ;; SERVER: 168.95.1.1#53(168.95.1.1) ;; WHEN: Sun May 1 15:32:43 2011 ;; MSG SIZE rcvd: 105 [/TEXT] 查一下 63.221.156.75 [TEXT] # whois 63.221.156.74 # # Query terms are ambiguous. The query is assumed to be: # "n 63.221.156.74" # # Use "?" to get help. # # # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=63.221.156.74?showDetails=true&showARIN=false # NetRange: 63.216.0.0 - 63.223.255.255 CIDR: 63.216.0.0/13 OriginAS: NetName: BTN-CIDR5 NetHandle: NET-63-216-0-0-1 Parent: NET-63-0-0-0-0 NetType: Direct Allocation Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 1999-12-09 Updated: 2004-11-12 Ref: http://whois.arin.net/rest/net/NET-63-216-0-0-1 OrgName: Beyond The Network America, Inc. OrgId: BNA-42 Address: 450 Springpark PL Address: Suite 100 City: Herdon StateProv: VA PostalCode: 20170 Country: US RegDate: 2004-05-25 Updated: 2009-02-04 Ref: http://whois.arin.net/rest/org/BNA-42 OrgTechHandle: PUN6-ARIN OrgTechName: PCCW US NOC OrgTechPhone: +1-703-621-1637 OrgTechEmail: usnoc@pccwglobal.com OrgTechRef: http://whois.arin.net/rest/poc/PUN6-ARIN OrgTechHandle: CDO54-ARIN OrgTechName: Downes, Chris OrgTechPhone: +1-703-621-1619 OrgTechEmail: cdownes@pccwglobal.com OrgTechRef: http://whois.arin.net/rest/poc/CDO54-ARIN OrgAbuseHandle: PAD13-ARIN OrgAbuseName: PCCW AUP Department OrgAbusePhone: +1-703-621-1637 OrgAbuseEmail: probinson@pccwglobal.com OrgAbuseRef: http://whois.arin.net/rest/poc/PAD13-ARIN OrgNOCHandle: PUN6-ARIN OrgNOCName: PCCW US NOC OrgNOCPhone: +1-703-621-1637 OrgNOCEmail: usnoc@pccwglobal.com OrgNOCRef: http://whois.arin.net/rest/poc/PUN6-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # [/TEXT] 查一下 80.77.6.55 Whois [TEXT] # whois 80.77.6.55 % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '80.77.6.0 - 80.77.6.255' inetnum: 80.77.6.0 - 80.77.6.255 netname: QUICK descr: Quivk Link country: EG admin-c: BIJA1-RIPE tech-c: BIJA1-RIPE status: ASSIGNED PA mnt-by: FLAG-MNT source: RIPE # Filtered person: Bijal Sanghani address: Flag Telecom address: London phone: +44 208 282 0068 e-mail: bsanghani@flagtelecom.com nic-hdl: BIJA1-RIPE mnt-by: FLAG-MNT source: RIPE # Filtered % Information related to '80.77.0.0/20AS15412' route: 80.77.0.0/20 descr: Route for FLAG Telecom - Egypt origin: AS15412 mnt-by: FLAG-MNT source: RIPE # Filtered [/TEXT] ebill.nextvod.com.tw 那個 IP 看起來是正常的, 因為是從 PCC 送過來的 PCC 是香港商電訊盈科. 但是實際怎麼樣, Route for FLAG telecom Egypt 寄認證信給我 ???? 難道是被 hacker? 最後補上 nmap 的資料 [TEXT] # nmap -sT 80.77.6.55 -O Starting Nmap 5.51 ( http://nmap.org ) at 2011-05-01 15:40 CST Nmap scan report for 80.77.6.55 Host is up (0.090s latency). Not shown: 998 closed ports PORT STATE SERVICE 80/tcp open http 443/tcp open https Device type: general purpose|WAP Running (JUST GUESSING): Microsoft Windows 2008|7|Vista (94%), FreeBSD 6.X (89%), OpenBSD 4.X (87%), AirSpan embedded (87%) Aggressive OS guesses: Microsoft Windows Server 2008 Beta 3 (94%), Microsoft Windows Server 2008 SP2 (93%), Microsoft Windows Server 2008 (91%), Microsoft Windows 7 (91%), Microsoft Windows Vista SP0 or SP1, Server 2008 SP1, or Windows 7 (91%), Microsoft Windows Server 2008 R2 (90%), Microsoft Windows 7 Professional (89%), FreeBSD 6.2-RELEASE (89%), FreeBSD 6.3-RELEASE (89%), OpenBSD 4.0 (87%) No exact OS matches for host (test conditions non-ideal). OS detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 6.64 seconds ms1 ~ # nmap -sT 63.221.156.75 -O Starting Nmap 5.51 ( http://nmap.org ) at 2011-05-01 15:41 CST Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn Nmap done: 1 IP address (0 hosts up) scanned in 3.54 seconds ms1 ~ # nmap -sT 63.221.156.75 -O -Pn Starting Nmap 5.51 ( http://nmap.org ) at 2011-05-01 15:41 CST Nmap scan report for 63-221-156-75.static.pccwglobal.net (63.221.156.75) Host is up (0.062s latency). Not shown: 995 filtered ports PORT STATE SERVICE 1433/tcp open ms-sql-s 2383/tcp open ms-olap4 3389/tcp open ms-term-serv 5800/tcp closed vnc-http 5900/tcp closed vnc Device type: general purpose Running: Microsoft Windows 2003|XP OS details: Microsoft Windows Server 2003 SP2, Microsoft Windows XP SP2 or Server 2003 SP1 or SP2 OS detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 9.52 seconds [/TEXT] 註: 最後換到 gmail, 而且收到認證信了, 結果認證完以後出現的帳號還是錯誤的 e-mail account. 整個網樂通的後台一整個很糟糕. 設計這一套系統的人應該切腹了.