[53212] in North American Network Operators' Group
Blackholing APNIC Routes (or a subset of)
daemon@ATHENA.MIT.EDU (Eric Germann)
Tue Nov 5 15:25:59 2002
Reply-To: <ekgermann@cctec.com>
From: "Eric Germann" <ekgermann@cctec.com>
To: <nanog@merit.edu>
Cc: "Eric Germann" <ekgermann@cctec.com>
Date: Tue, 5 Nov 2002 15:22:36 -0500
Errors-To: owner-nanog-outgoing@merit.edu
This is a multi-part message in MIME format.
------=_NextPart_000_0033_01C284DF.2B7ED120
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit
Anyone want to admit privately (I'll summarize to the list) if they actively
filter certain partitions of APNIC space?
We did a little experiment the past couple of days and saw at 85% of our
port 13[5-9] scans, Code Red/Nimda/formmail attempts, etc. go out the door
by blackholing those networks in .cn and .kr.
Thoughts? Is it a valid thesis? I've seen the discussions for spam
mitigation, etc via DNS, but this is actually null routing all their
traffic.
Eric
==========================================================================
Eric Germann CCTec
ekgermann@cctec.com Van Wert OH 45801
http://www.cctec.com Ph: 419 968 2640
Fax: 603 825 5893
"The fact that there are actually ways of knowing and characterizing the
extent of one’s ignorance, while still remaining ignorant, may ultimately be
more interesting and useful to people than Yarkovsky"
-- Jon Giorgini of NASA’s Jet Propulsion Laboratory
------=_NextPart_000_0033_01C284DF.2B7ED120
Content-Type: text/x-vcard;
name="Eric Germann.vcf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="Eric Germann.vcf"
BEGIN:VCARD
VERSION:2.1
N:Germann;Eric
FN:Eric Germann
ORG:CCTec
TEL;WORK;VOICE:(419) 968-2640
TEL;WORK;FAX:(603) 825-5893
ADR;WORK:;;17780 Middle Point Road;Van Wert;OH;45891;United States of =
America
LABEL;WORK;ENCODING=3DQUOTED-PRINTABLE:17780 Middle Point =
Road=3D0D=3D0AVan Wert, OH 45891=3D0D=3D0AUnited States of Americ=3D
a
URL:
URL:http://www.cctec.com
EMAIL;PREF;INTERNET:ekgermann@cctec.com
REV:20010529T013421Z
END:VCARD
------=_NextPart_000_0033_01C284DF.2B7ED120--
