nanog mailing list archives

Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking )


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Tue, 24 Jul 2007 21:26:51 GMT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- "Chris L. Morrow" <christopher.morrow () verizonbusiness com> wrote:

On Tue, 24 Jul 2007, Paul Ferguson wrote:


The particular service to be announced on Monday (BIS, or Botnet
Identification Service), is nothing more than a BGP feed of _known_
and _vetted_ botnet C&Cs as /32s, intended to be a black-hole feed.

Interested folks should either e-mail me off-list, or just wait for
the official announcement on 30 July.


note that this will take out vhost systems... unless they are vetted off
the list, which is certainly possible of course.

But of course. :-)

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGpm6Rq1pz9mNUZTMRAuVXAJ4jxpw0BRVlv8qmNXZQ9P++VHTjcwCg9JGy
591aYUFqou4ziRL5TQASDGg=
=lQba
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


Current thread: