[47845] in North American Network Operators' Group
Re: Arbor Networks DoS defense product
daemon@ATHENA.MIT.EDU (Scott Francis)
Thu May 16 12:50:31 2002
Date: Thu, 16 May 2002 09:47:45 -0700
From: Scott Francis <darkuncle@darkuncle.net>
To: PJ <briareos@otherlands.net>, Dan Hollis <goemon@anime.net>
Cc: nanog@merit.edu
Message-ID: <20020516164745.GJ50984@darkuncle.net>
Mail-Followup-To: Scott Francis <darkuncle@darkuncle.net>,
PJ <briareos@otherlands.net>, Dan Hollis <goemon@anime.net>,
nanog@merit.edu
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-ripemd160;
protocol="application/pgp-signature"; boundary="EVh9lyqKgK19OcEf"
Content-Disposition: inline
In-Reply-To: <20020516163551.GI50984@darkuncle.net>
Errors-To: owner-nanog-outgoing@merit.edu
--EVh9lyqKgK19OcEf
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, May 16, 2002 at 09:35:51AM -0700, darkuncle@darkuncle.net said:
[snip]
> > http://online.securityfocus.com/news/126
>=20
> There is a difference between what's legally acceptable and what's ethica=
l or
> even prudent.
One thing that I may not have made clear: I am not saying port scanning is
necessarily unethical or foolish at all times, or that it has no place in t=
he
network operator's toolkit. It obviously does. However, scans tend to be a
very reliable precursor to malicious activity. Perhaps a graduated landmine
response that first mails the technical contact for the netblock in question
after a certain threshold has been crossed, and then a blackhole after the =
next
threshold is crossed (assuming no response from the contact attempt).
--=20
Scott Francis darkuncle@ [home:] d a r k u n c l e . n e t
Systems/Network Manager sfrancis@ [work:] t o n o s . c o m
GPG public key 0xCB33CCA7 illum oportet crescere me autem minui
--EVh9lyqKgK19OcEf
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org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=l5W3
-----END PGP SIGNATURE-----
--EVh9lyqKgK19OcEf--