[62211] in North American Network Operators' Group
Re: relays.osirusoft.com
daemon@ATHENA.MIT.EDU (Chris Woodfield)
Tue Sep 16 18:09:37 2003
Date: Wed, 27 Aug 2003 13:47:31 -0400
From: "Chris Woodfield" <rekoil@semihuman.com>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
This is a multi-part message in MIME format.
------_=_NextPart_001_01C37C99.B1B86C80
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
IIRC, it was Ron Guilmette who did this for a BL zone he was operating a =
long time ago,=20
but it happened six months or so after he had deactivated the zone and =
was still=20
getting numerous queries for it. So he reactivated the zone, answering =
127.0.0.2 for=20
every query, to get those people to stop. He also posted his intentions =
to SPAM-L=20
and NANAE at least a few weeks in advance. Still a BOFHish move, but at =
least there was=20
plenty of warning.
-C
On Wed, Aug 27, 2003 at 01:36:54PM -0400, Nathan J. Mehl wrote:
>=20
> In the immortal words of Richard Welty (rwelty@averillpark.net):
> >=20
> > On Tue, 26 Aug 2003 15:25:46 -0700 (PDT) "Gary E. Miller" =
<gem@rellim.com> wrote:
> > > returning 127.0.0.2 for everything would be an ugly way to bow =
out.
> >=20
> > yes, but it's been done before.
>=20
> And oddly enough, it was a terrible idea the first time, and hasn't
> gotten any better in the intervening months. I suppose going down in
> a blaze of glory might be appealing in the sleep-deprived haze of the
> tail end of a multi-week DDOS attack, but PLEASE. Null-route the
> netblock and be done with it. Returning 127.0.0.2 for every query
> does NOTHING but convince more people that volunteer blacklist
> providers like SPEWS are more trouble than they're worth.
>=20
> -n
>=20
> =
------------------------------------------------------------<memory@blank=
.org>
> "Must I pray in Hebrew?" No, and wipe that look of terror off your =
face.=20
> Fluency in Hebrew, of course, is vital to the proper understanding of =
Israeli=20
> truck driver insults. (--David Bader, "How to Be an Extremely =
Reform Jew")
> =
<http://blank.org/memory/>-----------------------------------------------=
-----
------_=_NextPart_001_01C37C99.B1B86C80
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.0.6396.0">
<TITLE>Re: relays.osirusoft.com</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=3D2>IIRC, it was Ron Guilmette who did this for a BL zone =
he was operating a long time ago, </FONT>
<BR><FONT SIZE=3D2>but it happened six months or so after he had =
deactivated the zone and was still </FONT>
<BR><FONT SIZE=3D2>getting numerous queries for it. So he reactivated =
the zone, answering 127.0.0.2 for </FONT>
<BR><FONT SIZE=3D2>every query, to get those people to stop. He also =
posted his intentions to SPAM-L </FONT>
<BR><FONT SIZE=3D2>and NANAE at least a few weeks in advance. Still a =
BOFHish move, but at least there was </FONT>
<BR><FONT SIZE=3D2>plenty of warning.</FONT>
</P>
<P><FONT SIZE=3D2>-C</FONT>
</P>
<P><FONT SIZE=3D2>On Wed, Aug 27, 2003 at 01:36:54PM -0400, Nathan J. =
Mehl wrote:</FONT>
<BR><FONT SIZE=3D2>> </FONT>
<BR><FONT SIZE=3D2>> In the immortal words of Richard Welty =
(rwelty@averillpark.net):</FONT>
<BR><FONT SIZE=3D2>> > </FONT>
<BR><FONT SIZE=3D2>> > On Tue, 26 Aug 2003 15:25:46 -0700 (PDT) =
"Gary E. Miller" <gem@rellim.com> wrote:</FONT>
<BR><FONT SIZE=3D2>> > > returning 127.0.0.2 for everything =
would be an ugly way to bow out.</FONT>
<BR><FONT SIZE=3D2>> > </FONT>
<BR><FONT SIZE=3D2>> > yes, but it's been done before.</FONT>
<BR><FONT SIZE=3D2>> </FONT>
<BR><FONT SIZE=3D2>> And oddly enough, it was a terrible idea the =
first time, and hasn't</FONT>
<BR><FONT SIZE=3D2>> gotten any better in the intervening =
months. I suppose going down in</FONT>
<BR><FONT SIZE=3D2>> a blaze of glory might be appealing in the =
sleep-deprived haze of the</FONT>
<BR><FONT SIZE=3D2>> tail end of a multi-week DDOS attack, but =
PLEASE. Null-route the</FONT>
<BR><FONT SIZE=3D2>> netblock and be done with it. Returning =
127.0.0.2 for every query</FONT>
<BR><FONT SIZE=3D2>> does NOTHING but convince more people that =
volunteer blacklist</FONT>
<BR><FONT SIZE=3D2>> providers like SPEWS are more trouble than =
they're worth.</FONT>
<BR><FONT SIZE=3D2>> </FONT>
<BR><FONT SIZE=3D2>> -n</FONT>
<BR><FONT SIZE=3D2>> </FONT>
<BR><FONT SIZE=3D2>> =
------------------------------------------------------------<memory@bl=
ank.org></FONT>
<BR><FONT SIZE=3D2>> "Must I pray in Hebrew?" No, and wipe =
that look of terror off your face. </FONT>
<BR><FONT SIZE=3D2>> Fluency in Hebrew, of course, is vital to the =
proper understanding of Israeli </FONT>
<BR><FONT SIZE=3D2>> truck driver insults. =
(--David Bader, "How to Be an Extremely Reform Jew")</FONT>
<BR><FONT SIZE=3D2>> <<A =
HREF=3D"http://blank.org/memory/">http://blank.org/memory/</A>>-------=
---------------------------------------------</FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C37C99.B1B86C80--
