Quarantining infected hosts (Was: FBI tells the public to call their ISP for help)
sean at donelan.com
Mon Jun 18 15:25:47 UTC 2007
On Mon, 18 Jun 2007, Suresh Ramasubramanian wrote:
>> The best answer is probably paying for a strong ISP abuse team. But for
>> whatever reasons, some ISPs prefer to invest in other areas.
> Bah. Not to underrate having a strong and clued abuse team. However,
> throwing more people at this is a non starter. You need to automate.
Automation is a non-starter unless you have people to deal with the
exceptions. If you don't deal with exceptions, eventually problems with
any automated system will overwhelm you. You can only hid behind IVR
recordings "You call is very important to us" for so long.
More information about the NANOG