DoS Attacks
Haesu
haesu at towardex.com
Thu Oct 9 00:18:07 UTC 2003
<rant style="moaning and useless" context="naive">
I really don't give a ^H^H^H^H!H * !X *!X about what timeframe abuse departments operate. I just want more upstreams (or specifically my upstreams) to have a community that I can announce a /32 to null.
</rant>
-hc
--
Haesu C.
TowardEX Technologies, Inc.
Consulting, colocation, web hosting, network design and implementation
http://www.towardex.com | haesu at towardex.com
Cell: (978)394-2867 | Office: (978)263-3399 Ext. 170
Fax: (978)263-0033 | POC: HAESU-ARIN
On Wed, Oct 08, 2003 at 07:19:39PM -0400, Alan Spicer wrote:
>
> >
> > Due to the efficiency of our upstream provider's abuse department,
> > opening efficiently at 8 am and closing just as efficiently at 5 pm
> (because we all know network abuse only occurs between 8 and 5), the ISP
> wasn't going to be of much help with an attack that started at 6:30pm
> localtime.
> >
> > Andrew D Kirch
> > Security Admin - Summit Open Source Development Group
> > http://www.sosdg.org
> >
>
> * A lot of Abuse Departments are going to close at around 5pm, because the
> advanced staff that would know how to deal with such things goes home around
> that time. But most of them should have an escalation procedure, which means
> that there is someone(s) over the staff in the NOC or Call (Support) Center
> which can be called if necessary. You should insist or demand the issue be
> escalated if it warrants this. If they won't escalate it ask for the phone
> number of the supervisor... If they escalate it and you don't get a call
> back in 30-60 minutes ... call again (repeat until you get a call back). Be
> prepared to justify why you have had your issue escalated complete with
> emailable detailed information. Even if the guy that calls you back
> (semi-technical manager type) doesn't have the proper clue, chances are he
> has someone else on call that does.
>
> If they don't have this escalation capability ... (IMHO) get a different
> ISP.
>
> ---
> Alan Spicer (a_spicerNOSPAM at bellsouth.net)
> http://aspicer.homelinux.net/
> Systems and Network Administration,
> and Telecommunications
> (954) 977-5245
>
> "The wonderful thing about the Internet is that you're connected to everyone
> else. The terrible thing about the Internet is that you're connected to
> everyone else." -- Vincent Cerf (Father of the Internet)
>
> Customer: "The Internet is running too slow. Could you reboot it please?"
>
> Customer: "So that'll get me connected to the Internet, right?"
> Tech Support: "Yeah."
> Customer: "And that's the latest version of the Internet, right?"
> Tech Support: "Uhh...uh...uh...yeah."
>
More information about the NANOG
mailing list