nanog mailing list archives

RE: Google's Safe Browsing Alerts for Network Administrators


From: "Frank Bulk" <frnkblk () iname com>
Date: Mon, 12 Jan 2015 12:38:20 -0600

Thanks for that feedback on Google’s Safe Browsing Alerts.  We’ll have to see how that works out for us over time.

 

In regards to ShadowServer, I don’t think they’re randomly scanning networks, and neither are folks like OpenResolver – 
I think it’s pretty systematic, albeit from perhaps only a certain point of view on the Internet.  If their scans are 
being dropped and logged, that’s great – that means someone has measures in place to mitigate attacks that leverage 
those UDP protocols.   But for those who use their output to better secure their own and clients’ endpoint devices, 
it’s much appreciated.  If it’s really just a drop in the ocean, what does it matter to you?

 

Frank

 

From: Joe [mailto:jbfixurpc () gmail com] 
Sent: Monday, January 12, 2015 10:39 AM
To: Frank Bulk
Cc: nanog () nanog org
Subject: Re: Google's Safe Browsing Alerts for Network Administrators

 

 

I've not found it very usefull. As for Shadowserver.org I really wish folks trying to save the internet from 
mis-configurations would stop randomly scanning networks to fix. These folks are one of many "do-gooders" that are 
adding to the traffic being dropped and logged. Its only contibuting to the daily clutter of problem folk already 
poking and prodding. 

 

Regards,

-Joe


 

On Thu, Jan 8, 2015 at 5:54 PM, Frank Bulk <frnkblk () iname com <mailto:frnkblk () iname com> > wrote:


Current thread: