North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: NSPs filter?

  • From: Chris Woodfield
  • Date: Sun Aug 04 23:25:22 2002

IMO, Commercial ISPs should never filter customer packets unless 
specifically requested to do so by the customer, or in response to a 
security/abuse incident. 

Consumer ISPs are much more likely to have clauses in the AUPs that are 
enforced premptively via packet filtering - antispoof filters (honestly, 
antispoof filtering is, IMHO, the one expection to my "commercial ISPs 
should not filter" rule), port blocks to prevent customers running 
servers, outbound SMTP blocks to off-provider systems to stop direct-to-MX 
spamming, ICMP rate limiting, et al. All of which are fine by me as long 
as they clearly assert their right to do so in their AUP - that is, as 
long as there's a comparable provider I can use instead.

-C

On Sun, Aug 04, 2002 at 02:37:12PM +0000, [email protected] wrote:
> 
> > Good day,
> > 
> > What NSPs do filter packets, and can really deal with DoS and DDoS attacks?
> > 
> > -Abdullah Bin Hamad A.K.A Arabian
> 
> 	The shorter shorter list would be the NSPs that do NOT filter
> 	packets.  I can't think of an NSP that does not filter.
> 
> --bill

Attachment: pgp00001.pgp
Description: PGP signature