North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking by Cox)

  • From: Suresh Ramasubramanian
  • Date: Mon Jul 23 14:23:54 2007
  • Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=CfxxuDbAzUGuKdBjAmrA3GnQ7Z0sZ/mxClrceN5bXWttp1ja7pfpXZTVqdf04k3rIPw1p3X6/4Tq5pi4dYqH48dY0xkq/ZKYe3FUL/tCfTh8fmIRdhv50r7BN6nRgJqlR2yu00l2NhbHGOaV2azfmCCk+gPPs3birJxXFj6m6Hk=
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=s6H/SgSPNI72RVcB9n225pRRIgksoN5NgwzaN4btCS9hoL7qS33G9spPm1NLdw59inxyYCh1DouM69qjsU9RTUoCUaFUoGnTFidPMT1NGn+ChRBZ98+l/FGlJzdWlG/35mBg6WTNsSptXwErNTACo9vK1FKW5fYtnQKl9HLB/Cc=


On 7/23/07, Sean Donelan <[email protected]> wrote:



But, like other attempts to respond to network abuse (e.g. various block lists), sometimes there are false positives and mistakes. When it happens, you tweak the filters and undue the wrong block. Demanding zero chance of error before ISPs doing anything just means ISPs won't do anything.


Running email abuse desks for about a decade now makes me tend to agree with you .. and completely unfiltered pipes to the internet for customer broadband are a pipe dream, most places.

--
Suresh Ramasubramanian ([email protected])