[58247] in North American Network Operators' Group
Re: Pakistan government orders ISP service level agreement
daemon@ATHENA.MIT.EDU (Joe Abley)
Mon May 5 15:44:15 2003
Date: Mon, 5 May 2003 15:43:39 -0400
Cc: "Christopher L. Morrow" <chris@UU.NET>, nanog@merit.edu
To: Sean Donelan <sean@donelan.com>
From: Joe Abley <jabley@isc.org>
In-Reply-To: <Pine.GSO.4.44.0305051424250.3598-100000@clifden.donelan.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Monday, May 5, 2003, at 14:58 Canada/Eastern, Sean Donelan wrote:
> The attacks APPEAR to be originating from India and a virus called YAHA
> which targets certain Pakistan government web sites, .PK top-level
> domain
> name servers and the primary Internet exchange in Pakistan.
Two (of three) of the PK servers are in the US (in AS701). If the
attacks were happening due to some generally-distributed windows worm,
and were targetting the PK servers with any degree of ferocity, you'd
think this would be more than just a South Asian problem.
It's possible, of course, that the extremely different scales of
infrastructure deployment in South Asia compared with the 701 backbone
could cause the same attack traffic to be highly disruptive to the
former, and yet barely noticable by the latter.
Joe
