nanog mailing list archives
Re: BCP38 thread 93,871,738,435 + SPF
From: Douglas Otis <dotis () mail-abuse org>
Date: Fri, 27 Oct 2006 15:33:59 -0700
On Oct 27, 2006, at 10:03 AM, Chris L. Morrow wrote:
On Fri, 27 Oct 2006 Michael.Dillon () btradianz com wrote:Or you could look at it as a weakness of SPF that should be used as a justification for discouraging its use. After all if we discourage botnets because they are DDoS enablers, shouldn't we discourage other DDoS enablers like SPF?under this assumption we should discourage user use of the internet... :(anyway, please let's get back to the original discussion :)
As Steve already pointed out, BCP38 is not a complete solution. Not only does SPF prevent the source of a Botnet attack from being detected, it also enables significantly greater amplification than might be achieved with a spoofed source DNS reflective attack. In addition, the Botnet resources are not wasted, as their spam is still being delivered. This aspect alone dangerously changes the costs related to such attacks. It seems wholly imprudent not to consider SPF in the same discussion.
-Doug
Current thread:
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?), (continued)
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?) Sean Donelan (Oct 25)
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?) Per Heldal (Oct 26)
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?) Steven M. Bellovin (Oct 26)
- Re: BCP38 thread 93,871,738,435 Florian Weimer (Oct 26)
- Re: BCP38 thread 93,871,738,435 Steven M. Bellovin (Oct 26)
- Re: BCP38 thread 93,871,738,435 + SPF Douglas Otis (Oct 26)
- Re: BCP38 thread 93,871,738,435 + SPF Michael . Dillon (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Chris L. Morrow (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Michael . Dillon (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Chris L. Morrow (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Douglas Otis (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Gadi Evron (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Douglas Otis (Oct 29)
- Re: BCP38 thread 93,871,738,435 + SPF Gadi Evron (Oct 29)
- Re: BCP38 thread 93,871,738,435 + SPF Douglas Otis (Oct 29)
- Re: BCP38 thread 93,871,738,435 + SPF Gadi Evron (Oct 29)
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?) Sean Donelan (Oct 25)
- Re: BCP38 thread 93,871,738,435 + SPF Randy Bush (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Florian Weimer (Oct 27)
- Re: BCP38 thread 93,871,738,435 + SPF Douglas Otis (Oct 27)
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?) Patrick W. Gilmore (Oct 26)
- Re: BCP38 thread 93,871,738,435 (was Re: register.com down sev0?) Don (Oct 26)