[162697] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Tier1 blackholing policy?

daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Tue Apr 30 11:21:41 2013

From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Tue, 30 Apr 2013 15:17:32 +0000
In-Reply-To: <1367334447.31455.5.camel@hounddog>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Apr 30, 2013, at 10:07 PM, Chris Boyd wrote:

> 3 - Deliver all packets unless I've signed up for an enhanced security of=
fering?

Even if said packets from an obviously compromised server on a high-speed l=
ink are attack packets causing problems for the ISP itself as well as for i=
ts customers? =20

Trust me, large transit ISPs don't *want* to be in the blackholing business=
.  They only do so when they're forced into it by necessity (operational, l=
egal, regulatory).

Also note that in the case of the server(s) you can't access, they may well=
 be on shared hosting with thousands of sites/accounts on a single IP, one =
or more of which may be compromised.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton



home help back first fref pref prev next nref lref last post