[61427] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Sobig.f surprise attack today

daemon@ATHENA.MIT.EDU (Damian Gerow)
Thu Aug 28 16:33:45 2003

Date: Thu, 28 Aug 2003 16:32:31 -0400
From: Damian Gerow <damian@sentex.net>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <3F4E6292.8090601@he.iki.fi>
Errors-To: owner-nanog-outgoing@merit.edu


Thus spake Petri Helenius (pete@he.iki.fi) [28/08/03 16:23]:
> >I dont think this would work too well.  The users who are infected 
> >often think something is wrong because their connection and computer 
> >are not working quite right. So they disconnect / reconnect / reboot 
> >so they burn through quite a few dynamic IP addresses along the way.
> >
> This is an artifact of ISP?s wanting to have static IP?s as an add-on 
> premium service
> so they provide short lease times and change IP as often as it?s 
> feasible without
> interrupting service unneccessarily.

Or potentially an artifact of wanting more IP space from ARIN, as opposed to
assigning a static IP to every user we have, even the ones that are only
connected for about an hour a month.  But hey, that's just a minor detail.

home help back first fref pref prev next nref lref last post