Comclark Angeles - an Internet security risk to its subscribers and users: Comclark tech supervisor at clarkview SM office location a danger to secure web use ...

Comclark tech supervisor's today's declared IP range for comclark dynamically assigned IP's for Angeles City Comclark customers was an IP range in the 210.0.0.0 network class A range is totally wrong. The purpose of my query to Comclark tech supervisor was to secure server access to remote servers and to provide server security relevant iptables data to exclude all hackers from access AND at the same time include the full IP range of the local ISP to secure own access to remote server.This procedure is a common practice among security aware IT professionals to exclude all world and limiting access to a single or a few IPs or a single IP subnet. The response from Comclark technical supervisor a straight lie as so often in the Philippines. The result of this lie and hiding the security IP range will definitely result in a security risk to all business travelers, hotels using Comclark as ISP for its (business-) guests as well as to all local Philippine subscribers of Comclark Internet access services!

Wrong information - lack of cooperation to secure the web and avoid cybercrime withhin Comclark's IP range leading to potential vulnerability of all Comclark's customers and business travelers in Angeles City areas and the many hotels using Comclark as an ISP.

As we had a brief discussion about net security, server security and securing server access and hackers coming from within 210.0.0.0 range, etc, it became clear that technical support from Comclark has NO intention at all to protect their subscribers in Angeles City area from hackers or cyber criminals - nor to protect any business traveler in the many hotels using Comclark as ISP ( some 20'000 subscribers in Angeles area according to Comclark's on-duty technical supervisor ) from any abuse by cybercriminals!

The information provided by Comclark technical supervisor today was

• insufficient
• totally wrong
• and a total lack of security awareness and cooperation to reduce cybercrime was apparent - a lack of security awareness that more likely indicates cooperation with cyber criminals or protection of cyber crimes originating from PH, 210.0.0.0 network or even hsi own Comclark network.

My today's dynamic IP: 202.69.174.3 a short while earlier it was another IP in the same C class network 202.69.184.105.

A whois request confirms:

• inetnum: 202.69.170.0 - 202.69.170.127
• netname: INFRA-SERVER-CLARK
• country: PH
• descr: COMCLARK SERVER FARM

This totally misleading, wrong IP information makes it impossible to secure Internet access to own remote server leaving all doors open by hackers to remote servers. To properly protect own server an Internet user NEEDS to know the full range of dynamically assigned IPs of his provider in his entire geographcal area. For his own connection as well as for any other - for example friends, nearby Internet cafe or other nearby hotspots connection as well.

In case of own connection being down - something that happened in the past almost daily for a short time and weekly for extended periods of time - it ALWAYS is mandatory to have a contingency plan, for hotel owners, Internet cafe owners as well as all IT professionals, web publishers or business travelers. If you limited server access for your remote server admin using iptables, you NEED to leave at least 2 or 3 OTHER access points open within close geographical distance in case of extended ISP disconnection or in case of important server work that has no time to wait.

Comclark total lack Internet security awareness conclusion:

• never trust someone who has anything to hide
• never trust a liar
• beware that you have zero protection when accessing your server via Comclark and be prepared to do all the Internet security all on your own. In case of abuse never report to Comclark but always report to highest authority!! Those ISP who care as little about securing the web have lots of bla bla to tell you in case of abuse or damage ... about how sorry they are and how much they will do for you ... However the damage is fully yours and you have no improvements to expect by careless ISP or hosting companies. As a valid general rule: those who failed to care in your past or presence may never be expected to care for you in your future expect to save their own ass when facing a lawsuit for gross negligence or possible cooperation of cyber criminals or tolerating / protecting cyber criminals within their own IP web space.

Never depend on other people's cooperation - be prepared to fully secure your own Internet access!!! IN our modern easy money world with low education and low professional skills the cyber crime is increasing much faster than the educational level of www users. Beware of that and be prepared to handle all security related stuff all on your own fully and satisfactory.

God bless

hans