Re: DNS DDoS [was: register.com down sev0?]

[jerry () jdixon com]

The network hardware vendors do need to include the feature to support BCP-38.  It'll help us out on a number of fronts 
especially with some of the recent cyber attacks.  

We're in process of reaching out to many of the companies and many providers to encourage the implementation of BCP-38. 
 We've gotten a lot of great feedback from many of you and its greatly appreciated.  You know who you are :)
Especially some of the feedback related to the hardware OS issues.

-Jerry
Jerry () jdixon com or jerry.dixon () us-cert gov

Sent via BlackBerry from Cingular Wireless  

-----Original Message-----
From: Robert Boyle <robert () tellurian com>
Date: Thu, 26 Oct 2006 12:04:03 
To:"Patrick W. Gilmore" <patrick () ianai net>, nanog () merit edu
Subject: Re: DNS DDoS [was: register.com down sev0?]


At 11:21 AM 10/26/2006, you wrote:
Unfortunately, as Jared has pointed out, the equipment vendors have
> to help the operators support this.  So let's all call your favorite
> router vendor and ask them when they will have the "ip bcp38" config
> option. :)

Even better would be the option: "no ip bcp38"

Make it so a conscious action is needed to disable it, but PLEASE put 
that in the release notes so when the config doesn't "change" we know 
that something really did change... :)

R



Tellurian Networks - Global Hosting Solutions Since 1995
http://www.tellurian.com | 888-TELLURIAN | 973-300-9211
"Well done is better than well said." - Benjamin Franklin