nanog mailing list archives
Re: BGP list of phishing sites?
From: Iljitsch van Beijnum <iljitsch () muada com>
Date: Sun, 27 Jun 2004 22:44:13 +0200
On 27-jun-04, at 20:17, Scott Call wrote:
On the the things the article mentioned is that ISP/NSPs are shutting off access to the web site in russia where the malware is being downloaded from.
Now we've done this in the past when a known target of a DDOS was upcoming or a known website hosted part of a malware package, and it is fairly effective in stopping the problems.
So what I was curious about is would there be interest in a BGP feed (like the DNSBLs used to be) to null route known malicious sites like that?
I'm sure there is; but I'm slightly worried that transit networks may be tempted to subscribe to such a feed and in essence start censoring their customer's access to the net.
Also, an "easy fix" like this may lower the pressure on the parties who are really responsible for allowing this to happen: the makers of insecure software / insecure operational procedures (banks!) and gullible users.
Fixing layer 7+ problems at layer 3 just doesn't work and leads to significant collateral damage in the long run.
Current thread:
- BGP list of phishing sites? Scott Call (Jun 27)
- Re: BGP list of phishing sites? Christopher L. Morrow (Jun 27)
- Re: BGP list of phishing sites? Iljitsch van Beijnum (Jun 27)
- Re: BGP list of phishing sites? Paul Vixie (Jun 27)
- Re: BGP list of phishing sites? Website behind Net attack offline Henry Linneweh (Jun 27)
- Re: BGP list of phishing sites? Stephen J. Wilcox (Jun 28)
- Re: BGP list of phishing sites? Patrick W Gilmore (Jun 28)
- Re: BGP list of phishing sites? Dan Hollis (Jun 28)
- Re: BGP list of phishing sites? Patrick W Gilmore (Jun 28)
- Re: BGP list of phishing sites? Edward B. Dreger (Jun 28)
- Re: BGP list of phishing sites? Christopher L. Morrow (Jun 28)
- Re: BGP list of phishing sites? Michael . Dillon (Jun 29)
- Re: BGP list of phishing sites? Dan Hollis (Jun 29)
- Re: BGP list of phishing sites? Patrick W Gilmore (Jun 28)