How should ISPs notify customers about Bots (Was Re: DNS Hijacking

Suresh Ramasubramanian ops.lists at gmail.com
Tue Jul 24 16:02:59 UTC 2007


On 7/24/07, Chris L. Morrow <christopher.morrow at verizonbusiness.com> wrote:

> Pleaes do this at 1Gbps, really 2Gbps today and 20gbps shortly, in a cost
> effective manner. Please also do this on encrypted control channels or
> channels not 'irc', also please stay 'cost effective'. Additionally,

Right. However one consolation is that all this is edge filtering,
outbound. And some of it can be pushed off onto the CPE (e&oe
availability of patched CPE)

Outbound traffic volumes wont be as horrendously high as those
inbound, and should be a bit easier to categorize than inbound traffic

DNS and routing tricks are the silliest, to some - but well, they work
for a lot of low hanging fruit. And as you say, they are cost
effective.

srs



More information about the NANOG mailing list