[31972] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: DoS attacks, NSPs unresponsiveness

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Thu Nov 2 11:22:57 2000

Message-Id: <200011021620.eA2GKa422096@black-ice.cc.vt.edu>
To: J Bacher <jb@jbacher.com>
Cc: nanog@merit.edu
In-Reply-To: Your message of "Thu, 02 Nov 2000 09:58:25 CST."
             <Pine.OSF.4.21.0011020942440.30365-100000@ns.shawneelink.net> 
From: Valdis.Kletnieks@vt.edu
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_-804969896P";
	 micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Thu, 02 Nov 2000 11:20:36 -0500
Errors-To: owner-nanog-outgoing@merit.edu


--==_Exmh_-804969896P
Content-Type: text/plain; charset=us-ascii

On Thu, 02 Nov 2000 09:58:25 CST, J Bacher said:
> Wonderful.  The problem has been identified.  But, other than
> foot-stomping, I haven't seen any solutions to correct it.
> 
> The "we'll pull the plug" attitude won't work unless absence of said
> filtering violates that ISP's upstream AUP or contract.

Yes, but sometimes...

> 4) Disseminate the document through other appropriate mailing lists or
> newsgroups.

> It's completely pointless to identify a problem without also identifying
> possible solutions or working toward correcting the problem.

Myself and some co-workers have been involved in this..

http://www.sans.org/dosstep/index.htm
http://www.sans.org/topten.htm

Both go down to the "Install *this* patch" or "use *this* command" level.

And it's amazing how many sites simply *WILL NOT* do it unless forced to.

Enlightened altruism still exists in scattered pockets of the Internet, but
vast wastelands are managed by people and organizations that either don't
care or are unable to budget resources to act until the bits actually stop
moving from place to place.
-- 
				Valdis Kletnieks
				Operating Systems Analyst
				Virginia Tech



--==_Exmh_-804969896P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Exmh version 2.2 06/16/2000

iQA/AwUBOgGUVHAt5Vm009ewEQIWpgCg4WY9SJGWo50v46lOA+TFr736TXcAnRZ/
cQMu62MpiVVoxw8eMoWl9ZJk
=Kg70
-----END PGP SIGNATURE-----

--==_Exmh_-804969896P--


home help back first fref pref prev next nref lref last post