MSS Initiative

What's Here Other Links

Fixed Sites

Our main page has a list of sites that suffer from the Path MTU Discovery Blackhole. We notify every site that shows up on that list, and occasionally administrators actually fix the sites. Sometimes they notify us, other times we notice it's fixed but receive no communication from them. When a site is fixed, they are moved to this page. However, if a site emails us and asks not to be on this list, we will remove them. As such, the number of sites we report as fixed, may not be the same as the number of sites in this list.

If you are responsible for a site on this list and would like to be removed, contact the MSS Initiative at mss@ipom.com.

SITES BROKEN: 19
SITES FIXED: 23

Name URL Date Contacted Correspondence / Comments
USPS http://www.usps.com/ July 08, 2007 None
10/14/09 - We noticed they were fixed.
Orbitz http://www.orbitz.com/ July 08, 2007 None
10/14/09 - We noticed they were fixed... it's worth noting that orbitz never sends packets over 996 bytes to work around this, and most of their media is served by akamai which handles PMTUD correctly.
MySpace http://www.myspace.com/ July 08, 2007 None
10/14/09 - We noticed they were fixed
Domain Registry http://www.domain-registry.nl/ January 11, 2003 None
11/29/03 - We noticed they were fixed
Universal Postal Union http://www.upu.int/ December 10, 2002 None
11/29/03 - We noticed they were fixed
Lotto-Bayern http://www.lotto-bayern.de/ November 23, 2002 None
11/29/03 - We noticed they were fixed
UPS http://www.ups.com/ October 7, 2002 None
11/29/03 - We noticed they were fixed
Information Security Magazine http://www.infosecuritymag.com/ February 9, 2002 None
11/29/03 - We noticed they were fixed
CERT http://www.cert.org/ February 9, 2002 Automated
11/29/03 - We noticed they were fixed
Buy.com http://www.buy.com/ February 8, 2002 Automated
11/29/03 - We noticed they were fixed
Blackhat http://www.blackhat.com/
http://www.defcon.org/
November 13, 2002 01/11/03 - They responded and started to work with us to get things fixed
01/26/03 - They were fixed
Spiegel.de http://www.spiegel.de November 23, 2002 11/23/02 - We received a reply from an admin willing to work with us to fix the site.
12/08/02 - We noticed they were fixed
Security.nl http://www.security.nl April 20, 2002 None.
12/08/02 - We noticed they were fixed
Counterpane Internet Security http://www.counterpane.com/ February 7, 2002 Automated
11/12/02 - They emailed us to say they had fixed their site and asked for verification.
Lycos Directory http://dir.lycos.com/ March 21, 2002 3/21/02 - Automated
3/22/02 - Human saying they have forwarded our email to the right department
10/31/02 - They contacted us to check if they were still broken and they were not
ABN AMRO http://www.abnamro.nl/ February 4, 2002 Automated
10/21/02 - We noticed they were fixed
Rhythm http://www.rhythm.com/ February 24, 2002 Automated
10/21/02 - We noticed they were fixed
Rikers.org http://www.rikers.org/ April 13, 2002 04/13/02 - A reply with much information about their setup and a few questions
04/30/02 - We noticed they were fixed
RailTrack http://212.87.65.227/bin/newquery.exe/en/
June 25, 2002 06/25/02 - Requested further information. We replied with further details and explanation.
04/14/07 - We noticed the URL in question isn't in use anymore and the rest of their site appears unaffected.
Bank of Montreal http://www.bmo.com/ February 26, 2002 02/26/02 - Human reply saying they'd forwarded our email to the right place
02/26/02 - Automated
04/14/07 - We noticed they were fixed.
Ruby Tuesday http://www.rubytuesday.com/ February 24, 2002 Automated
04/14/07 - We noticed they were fixed.
TruSecure http://www.trusecure.com/ February 9, 2002 None
04/14/07 - We noticed they were fixed.


Valid XHTML 1.0

This page is © Phil Dibowitz 2001 - 2009