[55974] in North American Network Operators' Group
Re: scripts to map IP to AS?
daemon@ATHENA.MIT.EDU (jlewis@lewis.org)
Thu Feb 20 09:11:54 2003
Date: Thu, 20 Feb 2003 09:11:20 -0500 (EST)
From: jlewis@lewis.org
To: William Allen Simpson <wsimpson@greendragon.com>
Cc: nanog@merit.edu
In-Reply-To: <3E54D37D.4617B03D@greendragon.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Thu, 20 Feb 2003, William Allen Simpson wrote:
> Anybody have a pointer to scripts to map IP to AS?
I suspect the easiest thing to do would be to write some code to query a
looking glass, perhaps even install your own for this....
> There are still 10K-20K hosts spewing M$SQL slammer/sapphire packets,
> and I'd like to start blocking routing to those irresponsible AS's
> that haven't blocked their miscreant customers.
but automatically blocking AS's that send some 1434/udp traffic your way
sounds like a really bad idea and would setup an easy way to DoS your
network by "tricking" you into blocking certain AS's. Why not just block
1434/udp at your ingress points and be happy?
----------------------------------------------------------------------
Jon Lewis *jlewis@lewis.org*| I route
System Administrator | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
