[150968] in North American Network Operators' Group
Re: Request to lease IP space,
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Thu Mar 8 23:17:29 2012
In-Reply-To: <20120309035631.59078.qmail@joyce.lan>
Date: Fri, 9 Mar 2012 09:46:37 +0530
From: Suresh Ramasubramanian <ops.lists@gmail.com>
To: John Levine <johnl@iecc.com>
Cc: nanog@nanog.org, ggm@apnic.net
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Fri, Mar 9, 2012 at 9:26 AM, John Levine <johnl@iecc.com> wrote:
> >do, but I don't think the primary driver is spam, because spam generates
> a lower
> >income stream, and has higher risks of being RBL or otherwise blocked,
> and can be
> >achieved quickly by use of unrouted space.
>
> I think you overestimate how technically sophisticated snowshoers are.
> I just don't see a lot of spam from hit and run route announcements.
>
More like, they're as sophisticated as they need to be in their routing.
All their sophistication goes into figuring out ISP spam filtering and
bypassing it.
Those phantom route incidents are more often than not associated with bot
traffic, ddos etc rather than snowshoe spam.
--
Suresh Ramasubramanian (ops.lists@gmail.com)
