nanog mailing list archives
Re: filtering whitehouse.gov?
From: "Jon O ." <jono () microshaft org>
Date: Sat, 21 Jul 2001 16:29:51 -0700
On 22-Jul-2001, Andreas Plesner Jacobsen - Tiscali wrote:
On Sat, Jul 21, 2001 at 03:43:48PM -0700, Jon O . wrote:A couple of days ago I mentioned here that I have nullrouted the IP which whitehouse.gov resolves to. After that I received some mail in private mentioning not only the fact that I filtered the wrong IP (that's fixt now) but also the dangers of posting about such a thing here. "Hey, he nullroutes them, let's do it too!".I understand your need to do something like this, but you are essentially causing the worm to fulfill it's goal and censoring your customers. I worried that many people would do this.No, since it is known that the provider hosting www1 and www2.whitehouse.gov has already blackholed www1, and www.whitehouse.gov only resolves to www2 now. And then there's the big difference between operational stability and poltical stability, of which operational is the primary concern to me at least.
Yes, because your fix is for this worm and luckily it only attacks www1. The next one might not be so benign and blackholing routes is not the answer. Also, it makes it harder to ID infected hosts so you can fix them.
Attachment:
_bin
Description:
Current thread:
- filtering whitehouse.gov? Sabri Berisha (Jul 21)
- Re: filtering whitehouse.gov? Jon O . (Jul 21)
- Re: filtering whitehouse.gov? Andreas Plesner Jacobsen - Tiscali (Jul 21)
- Re: filtering whitehouse.gov? Jon O . (Jul 21)
- Re: filtering whitehouse.gov? John Starta (Jul 21)
- RE: filtering whitehouse.gov? Matt Levine (Jul 21)
- Re: filtering whitehouse.gov? Andreas Plesner Jacobsen - Tiscali (Jul 21)
- Re: filtering whitehouse.gov? Jon O . (Jul 21)
- Re: filtering whitehouse.gov? Sabri Berisha (Jul 22)