[166820] in North American Network Operators' Group
Re: Automatic abuse reports
daemon@ATHENA.MIT.EDU (joel jaeggli)
Wed Nov 13 00:23:08 2013
From: joel jaeggli <joelja@bogus.com>
In-Reply-To: <CADE4tYUsXyfCcKxtCjnWJPbUURqvYt=SnfO0ovkuayQdyew4Tg@mail.gmail.com>
Date: Tue, 12 Nov 2013 21:22:21 -0800
To: Brandon Galbraith <brandon.galbraith@gmail.com>
Cc: sam@circlenet.us, "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_368130B4-9C41-4122-BB61-8C21904DAECE
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=windows-1252
On Nov 12, 2013, at 9:16 PM, Brandon Galbraith =
<brandon.galbraith@gmail.com> wrote:
> On Tue, Nov 12, 2013 at 10:03 PM, William Herrin <bill@herrin.us> =
wrote:
>>> Now it would be trivial to setup syslog and sshd to give only the =
sessions
>>> that complete the handshake, however I'm also not sure how =
responsive some
>>> of the abuse contacts may be. I'll keep my restrictive network =
settings for
>>> the time being.
>>=20
>> That's the main problem: you can generate the report but if it's =
about
>> some doofus in Dubai what are the odds of it doing any good?
>=20
> And then we're right back to sending the offending packets to a black
> hole. *sigh*
>=20
a packet that you can drop quickly is a packet you don=92t have to think =
about.
--Apple-Mail=_368130B4-9C41-4122-BB61-8C21904DAECE
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iEYEARECAAYFAlKDDI0ACgkQ8AA1q7Z/VrL3TQCfTpCFjXyqnne02hgGdw2IvLRM
CBsAn29PSf+/w4yufTgZ0qcPZD+hqch4
=lt8d
-----END PGP SIGNATURE-----
--Apple-Mail=_368130B4-9C41-4122-BB61-8C21904DAECE--
