Automatic shutdown of infected network connections

Jack Bates jbates at brightok.net
Sat Aug 30 16:43:18 UTC 2003


Sean Donelan wrote:

> 
> How many ISPs disconnect infected computers from the network?  Do you
> leave them connected because they are paying customers, and how else
> could they download the patch from microsoft?

We disconnect after contact if they remain infected after 72 hours or 
once we determine contact won't be possible.

User's are responsible for their own computers. We understand that many 
of them need the service in order to fix their systems. However, a line 
has to be drawn at some point. I want the 135 blocks removed, and in 
order to do that, the malicious packets must be reduced to a minimum.

-Jack




More information about the NANOG mailing list