North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: [NANOG] Was: Code Red 2 cleanup -- SHOULD NSPs PULL THE PLUG? Solutions?
On Sat, 11 Aug 2001, matt carter wrote: > I don't think in any situation, aggravating the problem by 'returning > fire' serves any purpose. Put filters on your routers if it's that much of > a problem, get your upstream to do likewise if it's that serious.. > <--( SNIP )--> Helu, In the case of a lot of networks that are affected by this problem in particular, putting filters on your routers isn't a solution. It localizes the problem, sure, however do you just let the problem continue ad inifinitum? Also, the filtering of ingress/egress scanning attempts can be fairly resource intensive and is a very short-term 'measure' ( I say measure, because it doesn't offer a solution ). You might not 'return fire', but you should probably be thinking further ahead to an ultimate solution. In doing so, what are the possible solutions.. and how does elapsed time come into play when determining which solution fits the situation? This extends past the Code Red debacle, and into the ethereal 'what if?'. .z