[74672] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BCP38 making it work, solving problems

daemon@ATHENA.MIT.EDU (Randy Bush)
Mon Oct 11 13:33:54 2004

From: Randy Bush <randy@psg.com>
Date: Sun, 10 Oct 2004 20:14:01 -0700
To: Fergie (Paul Ferguson) <fergdawg@netzero.net>
Cc: nanog@nanog.org
Errors-To: owner-nanog-outgoing@merit.edu


the problem is that isp security folk doing actual measurement
see very little spoofing.  it's easy for the bad folk to get
real bots.  and tcp bad things are more popular and desirable,
e.g. spam, ...  and tcp does not work from spoofed addresses.

isp security folk have limited resources.  so why should they
spend them where there is little perceived benefit when there
are gaping holes elsewhere that need those resources?

yes, it's a nice thing to do.  but, in today's disasterous
economy, so are 42 other things that won't get done.  so it's
growing slowly.  when it solves critical problems, it'll grow
more quickly.

randy


home help back first fref pref prev next nref lref last post