MSS Initiative

Fixed Sites

Our main page has a list of sites that suffer from the Path MTU Discovery Blackhole. We notify every site that shows up on that list, and occasionally administrators actually fix the sites. Sometimes they notify us, other times we notice it's fixed but receive no communication from them. When a site is fixed, they are moved to this page. However, if a site emails us and asks not to be on this list, we will remove them. As such, the number of sites we report as fixed, may not be the same as the number of sites in this list.

If you are responsible for a site on this list and would like to be removed, contact the MSS Initiative at mss@ipom.com.

SITES BROKEN: 19
SITES FIXED: 23

Name	URL	Date Contacted	Correspondence / Comments
USPS	http://www.usps.com/	July 08, 2007	None 10/14/09 - We noticed they were fixed.
Orbitz	http://www.orbitz.com/	July 08, 2007	None 10/14/09 - We noticed they were fixed... it's worth noting that orbitz never sends packets over 996 bytes to work around this, and most of their media is served by akamai which handles PMTUD correctly.
MySpace	http://www.myspace.com/	July 08, 2007	None 10/14/09 - We noticed they were fixed
Domain Registry	http://www.domain-registry.nl/	January 11, 2003	None 11/29/03 - We noticed they were fixed
Universal Postal Union	http://www.upu.int/	December 10, 2002	None 11/29/03 - We noticed they were fixed
Lotto-Bayern	http://www.lotto-bayern.de/	November 23, 2002	None 11/29/03 - We noticed they were fixed
UPS	http://www.ups.com/	October 7, 2002	None 11/29/03 - We noticed they were fixed
Information Security Magazine	http://www.infosecuritymag.com/	February 9, 2002	None 11/29/03 - We noticed they were fixed
CERT	http://www.cert.org/	February 9, 2002	Automated 11/29/03 - We noticed they were fixed
Buy.com	http://www.buy.com/	February 8, 2002	Automated 11/29/03 - We noticed they were fixed
Blackhat	http://www.blackhat.com/ http://www.defcon.org/	November 13, 2002	01/11/03 - They responded and started to work with us to get things fixed 01/26/03 - They were fixed
Spiegel.de	http://www.spiegel.de	November 23, 2002	11/23/02 - We received a reply from an admin willing to work with us to fix the site. 12/08/02 - We noticed they were fixed
Security.nl	http://www.security.nl	April 20, 2002	None. 12/08/02 - We noticed they were fixed
Counterpane Internet Security	http://www.counterpane.com/	February 7, 2002	Automated 11/12/02 - They emailed us to say they had fixed their site and asked for verification.
Lycos Directory	http://dir.lycos.com/	March 21, 2002	3/21/02 - Automated 3/22/02 - Human saying they have forwarded our email to the right department 10/31/02 - They contacted us to check if they were still broken and they were not
ABN AMRO	http://www.abnamro.nl/	February 4, 2002	Automated 10/21/02 - We noticed they were fixed
Rhythm	http://www.rhythm.com/	February 24, 2002	Automated 10/21/02 - We noticed they were fixed
Rikers.org	http://www.rikers.org/	April 13, 2002	04/13/02 - A reply with much information about their setup and a few questions 04/30/02 - We noticed they were fixed
RailTrack	http://212.87.65.227/bin/newquery.exe/en/	June 25, 2002	06/25/02 - Requested further information. We replied with further details and explanation. 04/14/07 - We noticed the URL in question isn't in use anymore and the rest of their site appears unaffected.
Bank of Montreal	http://www.bmo.com/	February 26, 2002	02/26/02 - Human reply saying they'd forwarded our email to the right place 02/26/02 - Automated 04/14/07 - We noticed they were fixed.
Ruby Tuesday	http://www.rubytuesday.com/	February 24, 2002	Automated 04/14/07 - We noticed they were fixed.
TruSecure	http://www.trusecure.com/	February 9, 2002	None 04/14/07 - We noticed they were fixed.