[74672] in North American Network Operators' Group
Re: BCP38 making it work, solving problems
daemon@ATHENA.MIT.EDU (Randy Bush)
Mon Oct 11 13:33:54 2004
From: Randy Bush <randy@psg.com>
Date: Sun, 10 Oct 2004 20:14:01 -0700
To: Fergie (Paul Ferguson) <fergdawg@netzero.net>
Cc: nanog@nanog.org
Errors-To: owner-nanog-outgoing@merit.edu
the problem is that isp security folk doing actual measurement
see very little spoofing. it's easy for the bad folk to get
real bots. and tcp bad things are more popular and desirable,
e.g. spam, ... and tcp does not work from spoofed addresses.
isp security folk have limited resources. so why should they
spend them where there is little perceived benefit when there
are gaping holes elsewhere that need those resources?
yes, it's a nice thing to do. but, in today's disasterous
economy, so are 42 other things that won't get done. so it's
growing slowly. when it solves critical problems, it'll grow
more quickly.
randy