[108592] in North American Network Operators' Group
Re: DDoS Attack in Progress.
daemon@ATHENA.MIT.EDU (Steve Linford)
Sat Oct 11 10:52:53 2008
In-Reply-To: <ec57bf890810110722w1e358b63v211da537d4894320@mail.gmail.com>
From: Steve Linford <linford@spamhaus.org>
To: NANOG list <nanog@nanog.org>
Date: Sat, 11 Oct 2008 14:52:31 +0000
Errors-To: nanog-bounces@nanog.org
On 11 Oct 2008, at 16:22, Steve Church wrote:
> Beavis aka John Lopez:
> I, for one, am glad you're interested in stopping the abuse at its
> source.
> Thank you.
>
> Steve Linford:
>> why not ACL the source at your router or at whatever device is being
> (packeted).
> Mr. Lopez is contributing to the welfare of the net as a whole by
> addressing
> the cause, rather than applying a bandage locally to lessen the
> symptom. I
> sincerely hope your dismissive advice is not characteristic of
> Spamhaus
> policy regarding abused hosts, considering the mission statement at
> the top
> of your homepage.
>
> Steve Church
OK, you don't know much about Spamhaus. Dealing with network abuse
issues is what we do 24/7. John Lopez contacted my privately and I've
given him the address of TurkTelekom's security guy, but the reality
of things is that today is a Saturday and tomorrow is a Sunday,
unless TurkTelekom's guy is working weekends (unlikely) ACL'ing the
source is not just an advisable option but is probably until Monday
the only option.
Steve Linford
The Spamhaus Project
http://www.spamhaus.org
