[98061] in North American Network Operators' Group
Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Tue Jul 24 12:27:42 2007
Date: Tue, 24 Jul 2007 21:32:59 +0530
From: "Suresh Ramasubramanian" <ops.lists@gmail.com>
To: "Chris L. Morrow" <christopher.morrow@verizonbusiness.com>
Cc: "Joe Greco" <jgreco@ns.sol.net>, "Sean Donelan" <sean@donelan.com>,
nanog@merit.edu
In-Reply-To: <Pine.GSO.4.58.0707241422180.1179@marvin.argfrp.us.uu.net>
Errors-To: owner-nanog@merit.edu
On 7/24/07, Chris L. Morrow <christopher.morrow@verizonbusiness.com> wrote:
> Pleaes do this at 1Gbps, really 2Gbps today and 20gbps shortly, in a cost
> effective manner. Please also do this on encrypted control channels or
> channels not 'irc', also please stay 'cost effective'. Additionally,
Right. However one consolation is that all this is edge filtering,
outbound. And some of it can be pushed off onto the CPE (e&oe
availability of patched CPE)
Outbound traffic volumes wont be as horrendously high as those
inbound, and should be a bit easier to categorize than inbound traffic
DNS and routing tricks are the silliest, to some - but well, they work
for a lot of low hanging fruit. And as you say, they are cost
effective.
srs
