North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)

  • From: Suresh Ramasubramanian
  • Date: Mon Jun 18 11:25:39 2007
  • Dkim-signature: a=rsa-sha1; c=relaxed/relaxed;; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Ix1PiHfQ52looocB0GzLz6m4bmYoXB9GV6bcWgWudW1oRNbJqzZkHfDJptH654Y9fwnNHLhrp84+qA7vIzuinMNBkOEAmuVY+v1Hq/b7bqAsGXwX/+H+cDSVsXG0vathab2Tb3feN15otCHRw/zXg1aflD5ecaf8DPfKl84bxug=
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ZLuJE3sPx9oyGfegoRxAiJxyYFxLM4El0HNX6aPE8hjxP3fz9JE73049G/fqJyrj6qup9Zo/2gbhJOtI+p3NgMQc3dBYDLWmMP4u75k/ogQ4zoOFpT5DnYj+TUn9Ssl34v9PwCbt2Taml2USfquP582Y799v+ESp48as1XK95nQ=

On 6/18/07, Sean Donelan <[email protected]> wrote:
The great thing about opinions is everyone has one.
See also

MAAWG's port 25 management document is kind of based on consensus. Joe is a senior tech advisor at MAAWG. contributed substantially to that document .. and those two presentations were made at a maawg (san diego in 2005 if I remember right) so ..

The best answer is probably paying for a strong ISP abuse team.  But for
whatever reasons, some ISPs prefer to invest in other areas.

Bah. Not to underrate having a strong and clued abuse team. However, throwing more people at this is a non starter. You need to automate.

Suresh Ramasubramanian ([email protected])