[116612] in North American Network Operators' Group
Re: Botnet hunting resources
daemon@ATHENA.MIT.EDU (J.D. Falk)
Mon Aug 10 19:26:14 2009
Date: Mon, 10 Aug 2009 17:24:11 -0600
From: "J.D. Falk" <jdfalk-lists@cybernothing.org>
To: NANOG <nanog@nanog.org>
In-Reply-To: <m3iqgysy1c.fsf@luke.xen.prgmr.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Luke S Crawford wrote:
> 1. are there people who apply pressure to ISPs to get them to shut down
> botnets, like maps did for spam?
Hi, Luke! MAAWG recently published a document to help ISPs deal with
infected machines in their networks. It's not the same kind of pressure,
but (as we learned with open relays at MAPS) pressure isn't very effective
unless there are tools available to deal with the problem.
http://www.maawg.org/about/publishedDocuments/MAAWG_Bot_Mitigation_BP_2007-07.pdf
--
J.D. Falk
Return Path Inc
http://www.returnpath.net/
