nanog mailing list archives

RE: Fwd: Re: Digital Island sponsors DoS attempt?


From: "Borchers, Mark" <mborchers () splitrock net>
Date: Fri, 26 Oct 2001 11:38:56 -0500


If ping testing scales as badly as you suggest, all of
these products need to be yanked off the market asap.
Putting such tools in the hands of millions of end users
is certainly more of a threat than their use by network
engineers.

http://compnetworking.about.com/cs/pingtools/


On Fri, 26 Oct 2001, Jonas Luster wrote:

Jonas,

It's one every 20 seconds from -one- ISP.  What happens when 
thousands of ISPs begin offering this service?

a) more people are waken up at 3am by tripped IDS systems

b) more people filter all icmp and break the internet

c) more people have to add more acls to their routers to 
prevent pushing
garbage as much as possible at the core, driving up cost and cpu


This service should clearly be "opt-in".

Also, I believe the second comment made on this thread was 
regarding the
idea that we implicitly give people permission to do this 
sort of thing
by connecting to the internet (or per our sla/whatever).  I 
surely do not
give people permission to attack my network, why is this any 
different?
Intentions?

rgds,

Adam



Current thread: