The ISP's cooperate. Going after the zombies is, for the
most part, an ineffective approach to the situation. Search
and destroy of the controllers is more effective i.e.
1 controller = 100K downed bots. (example)
There's a ton of work going on behind the scenes.
-M<
--
Martin Hannigan (c) 617-388-2663
VeriSign, Inc. (w) 703-948-7018
Network Engineer IV Operations & Infrastructure
hannigan(_at_)verisign(_dot_)com
-----Original Message-----
From: asrg-bounces(_at_)ietf(_dot_)org
[mailto:asrg-bounces(_at_)ietf(_dot_)org]On Behalf Of
william(at)elan.net
Sent: Tuesday, December 21, 2004 6:52 PM
To: Barry Shein
Cc: ASRG list
Subject: Re: [Asrg] SICS
It should be ISP's responsibility to help other ISPs and as such most
appropriate way to deal with zombies is for ISPs to indicate which of
their ip blocks are used by broadband end-users and which are
real mail
servers. If majority of ISPs did that, that would effectively cut the
zombie spam only to be within ISP's own network, which I'm sure they'd
deal with a lot more promptly (and if they don't its really their
problem and their users who have to suffer but nobody elses).
On Tue, 21 Dec 2004, Barry Shein wrote:
The idea of complete end-user control is a utopian ideal
which died a
few years ago when spammers' zombie bots began hitting ISPs by the
thousands simultaneously.
At this point there are only two choices, either block at
the ingress
(e.g., blocking network blocks and similar), or begin
charging around
$1000/month for e-mail accounts to pay for the bandwidth
and hardware
necessary to keep up with the unfettered flow (essentially, a
dedicated server with a dedicated T1 per mailbox.)
Anyone who says otherwise, notably EFF, is just ignorant.
--
William Leibzon
Elan Networks
william(_at_)elan(_dot_)net
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg