RE: Are we really this helpless? (Re: isprime DOS in progress)

["Lorell Hathcock" <lorell () hathcock org>]

Every time I see a post like the one below on this list, I can't help but
feel like big brother has infiltrated the list.

There's no mess like the ones government will create for you.

Lorell

-----Original Message-----
From: David Conrad [mailto:drc () virtualized org] 
Sent: Friday, January 23, 2009 11:06 PM
To: Danny McPherson
Cc: NANOG list
Subject: Re: Are we really this helpless? (Re: isprime DOS in progress)

On Jan 23, 2009, at 8:53 PM, Danny McPherson wrote:
> You missed one..  Step 4: enable BCP 38 or similar
> ingress source address spoofing mitigation mechanism
> on all customer ingress interfaces
> ...
> No more excuses, people..

Sad fact is that there are zillions of excuses.  Unfortunately I  
suspect the only way we're going to make any progress on this will be  
for laws to be passed (or lawsuits to be filed) that impose a  
financial penalty on ISPs through which these attacks propagate.

Regards,
-drc



No virus found in this incoming message.
Checked by AVG - http://www.avg.com 
Version: 8.0.176 / Virus Database: 270.10.12/1911 - Release Date: 1/23/2009
7:28 AM