North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: FWD: RE: FW: Getting hacked by Digital Isle?

  • From: Jared Mauch
  • Date: Fri Oct 26 00:43:48 2001

	They should just implement it via a cgi on their webpage
where you can disable by your IP or some netblocks.

	The other thing to do is to just rate-limit icmp and know
that their stats will be off/incorrect.

	btw, 3 days does give them sufficent time to respond assuming you
were to send them something after COB on friday to respond by
monday.  The encoding of the abuse info is better than those old +++ATH
packets.

	- Jared

On Thu, Oct 25, 2001 at 09:07:32PM -0700, Todd Suiter wrote:
> 
> 
> 
> On Thu, 25 Oct 2001, Christopher Wolff wrote:
> 
> > ---------- Original Message ----------------------------------
> > From: Sean Gleason <[email protected]>
> > Date: Fri, 26 Oct 2001 01:02:21 +0000 (GMT)
> >
> > At this point you can:
> >
> > 1) Do nothing. Please accept our apologies and be assured that your
> >    machines are not being pinged by a hostile party.
> 
> 
> Hostile is a matter of definition. For some of us, these would be another
> in the category of 'false positive' events that LOTs of us look at by
> hand. I may be nitpicking here, but every security/network person who
> takes time out of their schedule to analyze and dig into this 'test', is
> having their time wasted. And the several days time frame is just poor judgement.
> 
> t
> 
> >

-- 
Jared Mauch  | pgp key available via finger from [email protected]
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.