Congress may require ISPs to block fraud sites H.R.3817

sthaug at sthaug at
Fri Nov 6 16:07:11 UTC 2009

> > Don't get hung up on the wording. A DNS blackhole list will do the
> > trick as well. I don't think border ACLs on routers will be necessary.
> do you use your ISP's dns servers? does your corporate vpn?

A DNS blackhole list makes it *appear* as if the government/police
is doing something.

"We must do something. This is something, therefore we must do it."

This way of thinking is alive and well in the form of DNS based child
porn blackhole lists in Norway and several other countries. The fact
that anybody who is *really interested* can easily evade these lists,
for instance by using his own DNS server, does not seem to concern
politicians or police...

Steinar Haug, Nethelp consulting, sthaug at

More information about the NANOG mailing list