LFPF - malware provider?

[BrianShaw]

Yesterday my company's webserver started denying acceess to this site, claiming that it has been "proven" to be a malware provider. I'm upset. I have never gotten any free malware. Where's mine? I work for a stodgy, suspicious, and apparently represive company that is denying my civil rights by restricting access to this fine forum. I hope whatever set off their naughty-site detector will soon be resolved. In the meantime, I'll be scarce.

[Sal Santamaura]

Perhaps your company reached that conclusion by evaluating the "malness" of what some abrasive posters have been adding to threads lately.

[Sevo]

If it is a firewall and no proxy server, it will be blocking by IP, not by DNS address. As the LFP address reverses to server3.reid.org, we may not have a unique IP address of our own, and if any other virtual server on the same hardware box is infected by malware, we'll end up on blocking lists along with it.

Another possible reason is that LFP is, for whatever reason, loading the Yahooapis script set - a legitimate Yahoo product, but many tight security policies (e.g. TrendMicro at maximum setting) will ban it as spyware. I don't know when Yahooapis were added - that might be a recent change, or they updated or changed your firewall policies.

[Otto Seaman]

Maybe they just wanted to get some work out of the employees they pay?

[jb7]

Surfing photography websites at work?

Hooray, the recession is over...

[Kirk Gittings]

While i was still a moderator a couple of days ago, someone emailed me with a similar story. I sent it on to Ralph but I had an old address for him and it bounced back. So this may be a bigger problem than we think.

[Jim C.]

A day or so ago there were some spam posts that had links in the message, I never followed the links but hovering my cursor over them
the status bar in Safari gave me weird web addresses, could that be that's the reason your company web server is denying access ?

Don't know if the Mods have deleted those messages or not,
not that anyone should click the links !

[Kirk Gittings]

While i was still a moderator a couple of days ago, someone emailed me with a similar story. I sent it on to Ralph but I had an old address for him and it bounced back. So this may be a bigger problem than we think.

I resent it to Ralphs proper email.

[rdenney]

A day or so ago there were some spam posts that had links in the message, I never followed the links but hovering my cursor over them
the status bar in Safari gave me weird web addresses, could that be that's the reason your company web server is denying access ?

Don't know if the Mods have deleted those messages or not,
not that anyone should click the links !

Such posts should be reported. We remove spam posts with nasty hidden links in them nearly every day, so I can't say from your description if that's one of the ones I "disappeared".

My "company" is not denying access (yet), and it's probably about as picky as any in existence that is not in a secure room.

Rick "who tries to keep up using an iPhone while traveling, and is risking thumb-overuse injuries" Denney

[Leigh]

If it is a firewall and no proxy server, it will be blocking by IP, not by DNS address.

Blocking by IP address is so last-century.

Every IP address can support over 64,000 unique users (different companies, organizations, etc).
Blocking an IP because one of those is a malware source also blocks the remaining good guys. Not reasonable.

- Leigh