North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: [NANOG] Was: Code Red 2 cleanup -- SHOULD NSPs PULL THE PLUG? Solutions?

  • From: z
  • Date: Fri Aug 10 19:35:32 2001

On Sat, 11 Aug 2001, matt carter wrote:

> I don't think in any situation, aggravating the problem by 'returning
> fire' serves any purpose. Put filters on your routers if it's that much of
> a problem, get your upstream to do likewise if it's that serious..

<--( SNIP )-->


  In the case of a lot of networks that are affected by this problem in
particular, putting filters on your routers isn't a solution.   It
localizes the problem, sure, however do you just let the problem continue
ad inifinitum?

  Also, the filtering of ingress/egress scanning attempts can be fairly
resource intensive and is a very short-term 'measure' ( I say measure,
because it doesn't offer a solution ).    You might not 'return fire', but
you should probably be thinking further ahead to an ultimate solution.  In
doing so, what are the possible solutions.. and how does elapsed time come
into  play when determining which solution fits the situation?

  This extends past the Code Red debacle, and into the ethereal 'what