[100030] in North American Network Operators' Group
Re: How to Handle ISPs Who Turn a Blind Eye to Criminal Activity?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Fri Oct 12 22:51:17 2007
To: Paul Ferguson <fergdawg@netzero.net>
Cc: nanog@nanog.org
In-Reply-To: Your message of "Fri, 12 Oct 2007 08:00:46 -0000."
<20071012.010046.11807.11@webmail03.vgs.untd.com>
From: Valdis.Kletnieks@vt.edu
Date: Fri, 12 Oct 2007 22:42:40 -0400
Errors-To: owner-nanog@merit.edu
--==_Exmh_1192243360_3255P
Content-Type: text/plain; charset=us-ascii
On Fri, 12 Oct 2007 08:00:46 -0000, Paul Ferguson said:
> Let me ask you this: What would you do when you have alerted
> (via abuse@ contacts) a notable ISP in the U.S. (not a tier one,
> and not just one of them) about KNOWN, VERIFIABLE, and RECURRING
> criminal activity in their customer downstreams?
I suppose you could always null-route them. Unfortunately, I suspect there's
enough ISPs in the world that meet your description that doing so for all of
them will push you significantly closer to the magical "240K routes melts your
router"..
The *big* question is, of course, whether there's enough of them for aggregation
to make a measurable difference... :)
--==_Exmh_1192243360_3255P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFHEDCgcC3lWbTT17ARAmLrAJ9Trjspr1JeuPBXJUdxF7IajVA/4gCg1G0x
0yHiLaEZYDHeH8T+CrtFgrs=
=CD4/
-----END PGP SIGNATURE-----
--==_Exmh_1192243360_3255P--
