Re: DoS Attacks

[Haesu <haesu () towardex com>]

<rant style="moaning and useless" context="naive">

I really don't give a ^H^H^H^H!H  *  !X  *!X  about what timeframe abuse departments operate. I just want more 
upstreams (or specifically my upstreams) to have a community that I can announce a /32 to null.

</rant>

-hc

-- 
Haesu C.
TowardEX Technologies, Inc.
Consulting, colocation, web hosting, network design and implementation
http://www.towardex.com | haesu () towardex com
Cell: (978)394-2867     | Office: (978)263-3399 Ext. 170
Fax: (978)263-0033      | POC: HAESU-ARIN

On Wed, Oct 08, 2003 at 07:19:39PM -0400, Alan Spicer wrote:
> > Due to the efficiency of our upstream provider's abuse department,
> > opening efficiently at 8 am and closing just as efficiently at 5 pm
> (because we all know network abuse only occurs between 8 and 5), the ISP
> wasn't going to be of much help with an attack that started at 6:30pm
> localtime.
> > Andrew D Kirch
> > Security Admin - Summit Open Source Development Group
> > http://www.sosdg.org
>
> * A lot of Abuse Departments are going to close at around 5pm, because the
> advanced staff that would know how to deal with such things goes home around
> that time. But most of them should have an escalation procedure, which means
> that there is someone(s) over the staff in the NOC or Call (Support) Center
> which can be called if necessary. You should insist or demand the issue be
> escalated if it warrants this. If they won't escalate it ask for the phone
> number of the supervisor... If they escalate it and you don't get a call
> back in 30-60 minutes ... call again (repeat until you get a call back). Be
> prepared to justify why you have had your issue escalated complete with
> emailable detailed information. Even if the guy that calls you back
> (semi-technical manager type) doesn't have the proper clue, chances are he
> has someone else on call that does.
>
> If they don't have this escalation capability ... (IMHO) get a different
> ISP.
>
> ---
> Alan Spicer (a_spicerNOSPAM () bellsouth net)
> http://aspicer.homelinux.net/
> Systems and Network Administration,
> and Telecommunications
> (954) 977-5245
>
> "The wonderful thing about the Internet is that you're connected to everyone
> else. The terrible thing about the Internet is that you're connected to
> everyone else."  -- Vincent Cerf (Father of the Internet)
>
> Customer: "The Internet is running too slow. Could you reboot it please?"
>
> Customer: "So that'll get me connected to the Internet, right?"
> Tech Support: "Yeah."
> Customer: "And that's the latest version of the Internet, right?"
> Tech Support: "Uhh...uh...uh...yeah."