[45644] in North American Network Operators' Group
Releasing AS numbers for misconfigured nets
daemon@ATHENA.MIT.EDU (Avleen Vig)
Mon Feb 11 23:11:07 2002
Date: Tue, 12 Feb 2002 02:29:42 +0000 (GMT)
From: Avleen Vig <lists-nanog@silverwraith.com>
To: <nanog@nanog.org>
Message-ID: <20020212021902.J47833-100000@apple.silverwraith.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
I hope I don't spark off a huge discussion on this :-)
But having said that, I am looking for personal as well as professional
opinions.
This email is being posted to both RIPE-EOF and NANOG as the decision
could be helpful to both parties, not just those in the RIPE region.
Background:
A many weeks ago, SAFE (http://www.ircnetops.org/smurf) to the decision
not to release the IP addresses of smurf amplifiers, only the weekly
statistics on smurf amplifiers in RIPE IP space as a whole. This was to
partly protect the misconfigured networks from being abused at a time when
they may not be able to fix the problem immediately.
Now:
A number of requests have been made for SAFE to release the AS number of
unco-operative[1] large (x500+ reply) smurf amplifiers, so that ISP's can
filter these people out more easily.
Further requests have been made that the AS numbers for *all* large smurf
amplifiers be released weekly.
What are the different thoughts people have on this?
Kindest regards,
[1] = those who fail to close an open smurf amplifier by the third check.
Checks are performed weekly. Notifications are emails to 'abuse', 'tech-c'
and 'admin-c' contacts as listed in the RIPE WHOIS database.
--
Avleen Vig
Network Security Officer
Smurf Amplifier Finding Executive: http://www.ircnetops.org/smurf
