nanog mailing list archives

Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking


From: "Suresh Ramasubramanian" <ops.lists () gmail com>
Date: Tue, 24 Jul 2007 21:32:59 +0530


On 7/24/07, Chris L. Morrow <christopher.morrow () verizonbusiness com> wrote:

Pleaes do this at 1Gbps, really 2Gbps today and 20gbps shortly, in a cost
effective manner. Please also do this on encrypted control channels or
channels not 'irc', also please stay 'cost effective'. Additionally,

Right. However one consolation is that all this is edge filtering,
outbound. And some of it can be pushed off onto the CPE (e&oe
availability of patched CPE)

Outbound traffic volumes wont be as horrendously high as those
inbound, and should be a bit easier to categorize than inbound traffic

DNS and routing tricks are the silliest, to some - but well, they work
for a lot of low hanging fruit. And as you say, they are cost
effective.

srs


Current thread: