Re: scan log and subsequent response from the host's ISP

[sec () ORGONE NEGATION NET (Jason Storm)]

On Thu, 6 Jul 2000, Brooke, O'Neil wrote:

> Hello
>
>       This may be a silly question, but, if this provider does not do
> anything to stop attacks targeting your machines, wouldn't you be
> justified in retaliating? If these people are actively probing your
> firewall, eventually they will find a weakness and get through.

if the isp is in the same country as you are, its definately not legal nor
a good idea to retaliate.  if the attack is noticed, at best you lose your
line, at worst your freedom.

if the isp is from another country, your best bet is to go to your
upstream to get the isp blackholed from your network.

if they refuse, try sending them a registered letter declaring your intent
to sue should they prove unable or unwilling to aid you.

of course, this is where you should be rapping with a legal expert...

-jason storm