Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)

Sean Donelan sean at donelan.com
Mon Jun 18 15:25:47 UTC 2007

On Mon, 18 Jun 2007, Suresh Ramasubramanian wrote:
>> The best answer is probably paying for a strong ISP abuse team.  But for
>> whatever reasons, some ISPs prefer to invest in other areas.
> Bah. Not to underrate having a strong and clued abuse team. However,
> throwing more people at this is a non starter.  You need to automate.

Automation is a non-starter unless you have people to deal with the 
exceptions.  If you don't deal with exceptions, eventually problems with 
any automated system will overwhelm you.  You can only hid behind IVR 
recordings "You call is very important to us" for so long.

More information about the NANOG mailing list