[12777] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Denial of service attacks apparently from UUNET Netblocks

daemon@ATHENA.MIT.EDU (Greg A. Woods)
Wed Oct 8 02:10:53 1997

Date: Wed, 8 Oct 1997 01:56:51 -0400 (EDT)
From: woods@most.weird.com (Greg A. Woods)
To: nanog@merit.edu
In-Reply-To: John A. Tamplin's message
	of "Tue, October 7, 1997 23:38:37 -0500"
	regarding "Re: Denial of service attacks apparently from UUNET Netblocks"
	id <Pine.A32.3.91.971007233351.27882o-100000@cyclone.traveller.com>
Reply-To: woods@weird.com (Greg A. Woods)

[ On Tue, October 7, 1997 at 23:38:37 (-0500), John A. Tamplin wrote: ]
> Subject: Re: Denial of service attacks apparently from UUNET Netblocks
>
> have area calling.  The limitations are that BellSouth's reporting is 
> utterly useless (so we have to use our logs to try and figure out the 
> utilization of those trunks), ISDN calls aren't forwarded, and the calling
> number the Ascend gets is that of our number that is fowarded to here.  
> Thus, we have no usefull caller identification for those lines.

OUCH!

I guess that would mean you'd have to subpoena call detail records for
those lines from BellSouth if you ever wanted to find out who really
called them.  Those lines could be oh-so-useful to a cracker with access
to somone else's dial-out modems....

I know these schemes are all to common in lots of places, and obviously
they're cheaper to set up and run than a remote POP, but do you really
need all the added risks?

-- 
							Greg A. Woods

+1 416 443-1734      VE3TCP      <gwoods@acm.org>      <robohack!woods>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>

home help back first fref pref prev next nref lref last post