nanog mailing list archives
Re: short Botnet list and Cashing in on DoS
From: Gadi Evron <ge () linuxbox org>
Date: Sat, 09 Oct 2004 20:53:22 +0200
Next you'll block SIP if we start getting "spam calls"? Or any other application that pops up and is used by the same people sending spam today?
There is the issue of usability. Why does a Cable user on a dynamic range need SMTP open?
You're fixing the symptom, not curing the cause. The immediate root cause is a compromised PC which among other things does send mail across port 25. It´ll also send mail using x-y-z webmail or misconfigured forms, etc.
Webmail, etc. could and would be used, but instead of millions of messages sent openly from each drones - there would be hundreds, maybe thousands.
It would be much more beneficial to deny all packets from AS's which don't have abuse in control.
That's not going to happen any time soon, and if only one ISP does it.. imagine the tech support screams? I'd rather treat the symptoms.
After all, the symptom of high-temperature is not the illness itself, but it could kill.
Gadi.
Current thread:
- Re: Microsoft problems?, (continued)
- Re: Microsoft problems? Cliff Albert (Oct 11)
- Re: Microsoft problems? Todd Mitchell - lists (Oct 11)
- Re: short Botnet list and Cashing in on DoS J. Oquendo (Oct 08)
- Re: short Botnet list and Cashing in on DoS alex (Oct 08)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 09)
- Re: short Botnet list and Cashing in on DoS Paul Vixie (Oct 09)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 09)
- Re: short Botnet list and Cashing in on DoS Petri Helenius (Oct 09)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 09)
- Re: short Botnet list and Cashing in on DoS Petri Helenius (Oct 09)
- Re: short Botnet list and Cashing in on DoS Gadi Evron (Oct 09)
- Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 09)
- Re: [nanog] Re: short Botnet list and Cashing in on DoS Dan Mahoney, System Admin (Oct 09)
- Re: [nanog] Re: short Botnet list and Cashing in on DoS Randy Bush (Oct 09)
- Re: [nanog] Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 10)
- Re: short Botnet list and Cashing in on DoS Mark Andrews (Oct 10)
- Re: short Botnet list and Cashing in on DoS James Baldwin (Oct 10)
- Re: short Botnet list and Cashing in on DoS Alexei Roudnev (Oct 10)
- BCP38 making it work, solving problems Sean Donelan (Oct 10)
- Re: BCP38 making it work, solving problems Edward B. Dreger (Oct 11)
- Re: short Botnet list and Cashing in on DoS Bill Stewart (Oct 11)