relays.osirusoft.com

Chris Woodfield rekoil at semihuman.com
Wed Aug 27 17:47:31 UTC 2003


IIRC, it was Ron Guilmette who did this for a BL zone he was operating a long time ago, 
but it happened six months or so after he had deactivated the zone and was still 
getting numerous queries for it. So he reactivated the zone, answering 127.0.0.2 for 
every query, to get those people to stop. He also posted his intentions to SPAM-L 
and NANAE at least a few weeks in advance. Still a BOFHish move, but at least there was 
plenty of warning.

-C

On Wed, Aug 27, 2003 at 01:36:54PM -0400, Nathan J. Mehl wrote:
> 
> In the immortal words of Richard Welty (rwelty at averillpark.net):
> > 
> > On Tue, 26 Aug 2003 15:25:46 -0700 (PDT) "Gary E. Miller" <gem at rellim.com> wrote:
> > > returning 127.0.0.2 for everything would be an ugly way to bow out.
> > 
> > yes, but it's been done before.
> 
> And oddly enough, it was a terrible idea the first time, and hasn't
> gotten any better in the intervening months.  I suppose going down in
> a blaze of glory might be appealing in the sleep-deprived haze of the
> tail end of a multi-week DDOS attack, but PLEASE.  Null-route the
> netblock and be done with it.  Returning 127.0.0.2 for every query
> does NOTHING but convince more people that volunteer blacklist
> providers like SPEWS are more trouble than they're worth.
> 
> -n
> 
> ------------------------------------------------------------<memory at blank.org>
> "Must I pray in Hebrew?" No, and wipe that look of terror off your face. 
> Fluency in Hebrew, of course, is vital to the proper understanding of Israeli 
> truck driver insults.     (--David Bader, "How to Be an Extremely Reform Jew")
> <http://blank.org/memory/>----------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030827/b2f04d60/attachment.html>


More information about the NANOG mailing list