nanog mailing list archives

Re: Yahoo offline because of attack (was: Yahoo network outage)


From: Jared Mauch <jared () puck Nether net>
Date: Wed, 9 Feb 2000 16:53:00 -0500


        I firmly believe that the security groups will be working closer
together after this week than ever before.  I spent some time talking
to the C&W security group today about a problem related to the stream.c
exploit being used.

        Is anyone dropping traffic from src/dst ips that are currently
reserved and do not have any allocations out of them (such as 60/8
for example) anywhere inside their network?  I know that MAPS
has gone and done something similar to this as it relates to
their rbl, but I am not aware of any providers doing anything but route
filtering on these prefixes, not packet filtering.

        - jared

On Wed, Feb 09, 2000 at 01:09:29PM -0800, Dan Hollis wrote:

On Wed, 9 Feb 2000, Travis Pugh wrote:
... assuming a minimal amount of cooperation between upstream provider and

Theres that "c" word again. It just isnt going to happen.

-Dan


-- 
Jared Mauch  | pgp key available via finger from jared () puck nether net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.
END OF LINE  |



Current thread: