nanog mailing list archives

Re: Worm Bandwidth [was Re: Santa Fe city government computers knocked out by worm]


From: Petri Helenius <pete () he iki fi>
Date: Sat, 29 Nov 2003 00:08:51 +0200


Sean Donelan wrote:

ISPs don't have (much) control over third-party computers. But they can
control their network capacity.  Of course, its not a complete solution.
If you are a mid-level ISP, you may have a choke point to your customer
but are vulnerable from your upstream provider. A better designed worm
could impact even major backbones.

If you are an access provider, specially in the consumer space, you can do many things
to help the "Greater Internet" by keeping your own back yard in good shape.
In the transit business, you are expected to deliver the bits regardless of the content so there the only viable option is to drop packets where the source or destination
addresses donĀ“t make sense.

Pete




Current thread: