Why won't providers source-filter attacks? Simple.

Tue Feb 4 19:35:33 UTC 2014

----- Original Message -----
> From: "Paul Ferguson" <fergdawgster at mykolab.com>

> > (And yes, I know that in the first case, it urges the customer to
> > cough up the bucks, and in the second case, it's usually not a
> > revenue generator)
> 
> It's a dichotomy that is... unexplainable for me personally.

Nope: it's easy to explain; you merely have to be a cynical bastard:

Attack traffic takes up bandwidth.

Providers sell bandwidth.

It *is in their commercial best interest (read: maximizing shareholder
value) *NOT* to filter out DOS, DDOS, and spam traffic until their hand is 
forced -- it's actually their fiduciary duty not to.

*THIS* is the problem we have to fix.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates       http://www.bcp38.info          2000 Land Rover DII
St Petersburg FL USA      BCP38: Ask For It By Name!           +1 727 647 1274