[39457] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: DDoS attacks

daemon@ATHENA.MIT.EDU (Scott Francis)
Wed Jul 11 22:26:02 2001

Date: Wed, 11 Jul 2001 19:23:36 -0700
From: Scott Francis <darkuncle@darkuncle.net>
To: "Richard A. Steenbergen" <ras@e-gerbil.net>
Cc: Ariel Biener <ariel@fireball.tau.ac.il>, nanog@merit.edu
Message-ID: <20010711192336.Z4553@darkuncle.net>
Mail-Followup-To: Scott Francis <darkuncle@darkuncle.net>,
	"Richard A. Steenbergen" <ras@e-gerbil.net>,
	Ariel Biener <ariel@fireball.tau.ac.il>, nanog@merit.edu
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="XUd+PsnCfaVdInSg"
Content-Disposition: inline
In-Reply-To: <Pine.BSF.4.21.0107111929180.9021-100000@overlord.e-gerbil.net>; from ras@e-gerbil.net on Wed, Jul 11, 2001 at 07:40:45PM -0400
Errors-To: owner-nanog-outgoing@merit.edu



--XUd+PsnCfaVdInSg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jul 11, 2001 at 07:40:45PM -0400, Richard A. Steenbergen exclaimed:
> Hrm you may have an idea there. Since so many attacks are related to
> EFNet, and there are so many possible reasons for it to be impacting the
> rest of the internet, I propose we introduce a new ICMP type, ICMP EFNet.
> This message type could be used to convey all kinds of important
> information about why things are broken, for example:
>=20
> ICMP EFNet code 1 - Smurfing
> ICMP EFNet code 2 - SYN Flooding
> ICMP EFNet code 3 - Channel takeover
> ICMP EFNet code 4 - Warring botnets
> ICMP EFNet code 5 - Dianora
>=20
> and many other useful messages.

regardless of one's opinion on the usefulness/validity/point of IRC, I think
some respect is due EFnet simply considering the antiquity of the network, =
and
the sheer volume of communication, good bad and indifferent, that has flowed
over it since its inception. I'm sure I'll be flamed for my (mis)use of
'antiquity', but I think IRC has been, and continues to be, a valuable
communication tool. Like any useful tool, it tends to be used for both
beneficial and nefarious purposes.

And let's not forget that any network attack, regardless of the target or
purpose, is a Bad Thing and responsible netizens should do their part to he=
lp
eliminate such abuses.

I'm done preaching now; I'm sure those who agree with me didn't need a reha=
sh,
and those that don't are unlikely to change their minds. Just wanted to
provide a counterpoint to the "since $service has no business function and
doesn't increase profits, there's no point in supporting it" crowd.

(not that RAS is necessarily in that crowd; he just happened to be the first
to respond.)

Sometimes things are worth doing, even if doing them causes you some grief.=
 I'm
sure cynicism will eventually overwhelm me and I will realize that there's =
no
point in sticking one's neck/network out to provide a useful service to the
community.

okay, I'm ready for the flames now.

> --=20
> Richard A Steenbergen <ras@e-gerbil.net>       http://www.e-gerbil.net/ras
> PGP Key ID: 0x138EA177  (67 29 D7 BC E8 18 3E DA  B2 46 B3 D8 14 36 FE B6)

--=20
Scott Francis                   darkuncle@ [home:] d a r k u n c l e . n e t
Systems/Network Manager          sfrancis@ [work:]         t o n o s . c o m
UNIX | IP networks | security | sysadmin | caffeine | BOFH | general geekery
GPG public key 0xCB33CCA7              illum oportet crescere me autem minui

--XUd+PsnCfaVdInSg
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
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=0JcG
-----END PGP SIGNATURE-----

--XUd+PsnCfaVdInSg--

home help back first fref pref prev next nref lref last post