[61225] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Opinion on null0'ing entire 218.0.0.0?

daemon@ATHENA.MIT.EDU (jlewis@lewis.org)
Tue Aug 26 10:54:15 2003

Date: Tue, 26 Aug 2003 10:53:33 -0400 (EDT)
From: jlewis@lewis.org
To: Mikael Abrahamsson <swmike@swm.pp.se>
Cc: Drew Weaver <drew.weaver@thenap.com>,
	"'nanog@merit.edu'" <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.44.0308261639390.26311-100000@uplift.swm.pp.se>
Errors-To: owner-nanog-outgoing@merit.edu


On Tue, 26 Aug 2003, Mikael Abrahamsson wrote:

> > Is anyone getting hundreds of thousands of spasm a day from 218.0.0.0 like I
> > am? Has anyone actually considered null routing the whole block?
> > 
> > Is there actually any 'users' in APNIC space? Or is it all spam from korea?
> 
> Korea has one of the highest ratio of broadband connected households in 
> the world (if not the highest).

That would explain the incredibly large number of open proxies in 218/8.

Drew, I don't think you're being spammed by Koreans...at least not 
directly by the ones delivering the spam to you.  You're more likely just 
being spammed via open proxies that happen to be Korean.

It's your network...do what your customers will let you get away with.
How many Korean customers might you have that will be pissed when they 
find they can't exchange email with family and friends in Korea?  There's 
one sure way to find out.
 
----------------------------------------------------------------------
 Jon Lewis *jlewis@lewis.org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |  
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________



home help back first fref pref prev next nref lref last post