[39518] in North American Network Operators' Group
DoS Attack Reporting tool
daemon@ATHENA.MIT.EDU (Jon O .)
Thu Jul 12 16:54:08 2001
Date: Thu, 12 Jul 2001 13:50:57 -0700
From: "Jon O ." <jono@microshaft.org>
To: Dan Hollis <goemon@anime.net>
Cc: Hank Nussbacher <hank@att.net.il>,
"jono@networkcommand.com" <jono@microshaft.org>,
Roeland Meyer <rmeyer@mhsc.com>,
"'Scott Francis'" <darkuncle@darkuncle.net>,
"Richard A. Steenbergen" <ras@e-gerbil.net>,
Ariel Biener <ariel@fireball.tau.ac.il>, nanog@merit.edu
Message-ID: <20010712135057.A20376@networkcommand.com>
Reply-To: "jono@networkcommand.com" <jono@microshaft.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="NzB8fVQJ5HfG6fxh"
Content-Disposition: inline
In-Reply-To: <Pine.LNX.4.30.0107112300340.11793-100000@anime.net>; from goemon@anime.net on Wed, Jul 11, 2001 at 11:07:15PM -0700
Errors-To: owner-nanog-outgoing@merit.edu
--NzB8fVQJ5HfG6fxh
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On 11-Jul-2001, Dan Hollis wrote:
> On Thu, 12 Jul 2001, Hank Nussbacher wrote:
> > Convince me why a list of non-cooperative ISPs is a thing that would
> > help.
>=20
> behavior modification is sometimes achieved by bad PR.
>=20
> They might blow off some individual isp, "eat your pingflood, we
> will shut down our smurf amps when we feel like it". I would imagine
> their attitude might change when reporters start calling, "when are you
> planning on shutting down your 10mb/s smurf amps?"
>=20
I've created a yahoo group for this type of purpose.
It can be found here:
http://groups.yahoo.com/group/dos_reports
The goal of this group is to provide a medium for sharing
information about DoS attacks. This includes current attacks
on your network, a phonebook with ISP contact information,
reporting ISP cooperation levels, etc.
The quality of this tool is dependent upon the quality of=20
the members. Please bear this in mind when posting. Please=20
do not send single line remarks about someone else's comments,=20
or generally be unhelpful. I've seen too much of that on this list.=20
This tool is not to replace the function of the NANOG list,=20
but to provide organized data that can easily be parsed and used.
We all know that many large ISPs are uncooperative when dealing=20
with DDoS attacks and responding to complaints. Well, a public forum=20
with peer review might help this situation.
If you want things to change you have to take action. Please=20
participate in this first small action toward a solution.
Any comments or suggestions are welcome. If you have some=20
documentation to add, or anything send it my way.=20
Thanks,
Jon
--NzB8fVQJ5HfG6fxh
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org
iD8DBQE7Tg2w6nXMS6O+1XQRAnoHAJ4kshpZYUOGCwVqkwkWpul6FRoAxwCgogBP
hZfqad3WzCtTHgeVlSuDWiQ=
=t8e5
-----END PGP SIGNATURE-----
--NzB8fVQJ5HfG6fxh--
