RE: Nimda et.al. versus ISP responsibility

["Chad Mawson" <CMAWSON () woodsaitken com>]

Where does the "Internet" (witha a capital I) start?  For example at
home I use Roadrunner Cable access.  The Internet certainly doesn't
start on the other side of the cable router.  Does it start on the other
side of my local Time-Warner office?  Does it start outside of a
regional office?  As far as Time-Warner is concerned the answer is "NO".
I've read their terms of service very closely.  They say that any
"excessive" use will be dealt with.  I pay my money to them, I follow
their rules.  If I get scanned by an infected system enough times, I
look up their info.  If it's another Time-Warner customer, I send the
information I have to Time-Warner.  

MMorell () vdat com stated ISPs policing their networks is "going against
everything the net stands for" to me this would only apply if - a) the
Internet could stand for anything, and - b) assumes ISP's are the
Internet.  If bandwidth were infinite I would agree 100%.  Right now
though I'm tired of other users of the service that we both pay for
(other Time-Warner customers that is) using my bandwidth.

This is all academic to me.  Until I have a direct connection to the
Internet, anyone up the line from me can dictate what I can or can't do.
If I don't like that I can try to take my business somewhere else, but I
have yet to find an ISP that doesn't have some rules, and I don't know
that I'd want to deal with any that are completly unregulated.  If I pay
my ISP for service, but someone else is usurping all the available
bandwidth and the ISP won't do anyhting about it, they aren't going to
be my ISP any longer.

Chad Mawson


-----Original Message-----
From: ahoward () noerrors com [mailto:ahoward () noerrors com]
Sent: Thursday, September 27, 2001 4:11 PM
To: incidents () securityfocus com
Subject: RE: Nimda et.al. versus ISP responsibility


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


MMorell () vdat com wrote:
> Now, the question posed is, Should the ISP's be responsible 
> for policing hosts on their networks.
>
> The answer is clearly No.   This goes against everything the 
> net stands for.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com