- NANOG - lists.nanog.org

Re: Schneier: ISPs should bear security burden
by Fergie (Paul Ferguson) 27 Apr '05

27 Apr '05

Is VoIP? Of course not. But, it does brings the dicussion full circle.... - ferg -- "Steven M. Bellovin" <smb(a)cs.columbia.edu> wrote: Is, for example, p2p "abuse"? After all, it uses up bandwidth. -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: Schneier: ISPs should bear security burden
by Fergie (Paul Ferguson) 27 Apr '05

27 Apr '05

None -- when you disconnect [correct, block, whatever] abusive end-systems in your administrative domain. Act locally, think globally. In fact, an ISP in AUS just did this last week... - ferg Owen DeLong <owen(a)delong.com> wrote: How much functionality are we going to destroy before we realize that you can't fix end-node problems in the transit network? -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

Re: Schneier: ISPs should bear security burden
by Fergie (Paul Ferguson) 27 Apr '05

27 Apr '05

Thank you, Steve, for a very articulate & rational post. :-) - ferg -- "Steve Sobol" <sjsobol(a)JustThe.net> wrote: [snip] Anyone who thinks AOL is doing this out of the goodness of their hearts, please speak up now... [FX: sound of crickets chirping] Yup. That's what I thought. Not having to support people who have tons of viruses saves money, and therefore is a good idea. Making it easier for people to avoid infection is good business, especially when you are talking about AOL's userbase (in terms of sheer numbers and the Internet expertise of the stereotypical AOL member). [snip] -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: Detecting VoIP traffic in ISP network
by Fergie (Paul Ferguson) 27 Apr '05

27 Apr '05

You sure about that? ;-) http://fergdawg.blogspot.com/2005/04/57-evil-43-good.html - ferg -- Petri Helenius <pete(a)he.iki.fi> wrote: Suresh Ramasubramanian wrote: >Local telco concerned about voip eating into their revenues, and wants >to push through legislation or something? :) > Or somebody who would like to provision adequate bandwidth to accommodate for services on the rise? Not everybody is installed with the evil bit enabled by default :-) Pete -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Detecting VoIP traffic in ISP network
by Joe Shen 27 Apr '05

27 Apr '05

Hi, we want to collect statistics in our backbone networks. Is there any good method to this? is there any product for this ? Joe _________________________________________________________ Do You Yahoo!? 嫌邮箱太小？雅虎电邮自助扩容！ http://cn.rd.yahoo.com/mail_cn/tag/10m/*http://cn.mail.yahoo.com/event/10m.…

3 2

cox communications contact please?
by Jonathan M. Slivko 27 Apr '05

27 Apr '05

Hello, Anyone from Cox Communications reading this list? If so, please contact me off-list regarding a routing issue on your network. Thank you!

1 0

FW: Port 25 - Blacklash
by Paul Ryan 27 Apr '05

27 Apr '05

For any educational institutions on this list - what has been the impact on your mail services once your ISP started blocking port 25 - what if any was the backlash - and how difficult was it to provide alternatives ...587,465 etc ... best regards, _____________________________________ Paul Ryan - AS812 yahoo handle - paul_ryan_ismc _____________________________________

12 13

Re: Schneier: ISPs should bear security burden
by Fergie (Paul Ferguson) 27 Apr '05

27 Apr '05

Finally -- an analogy I can relate to. ;-) As an aside, perhaps if we worked on making the Internet "safer", as opposed to strictly "safe", we might make some progress. You know -- baby steps. And Big Pond is my hero. :-) http://www.zdnet.com.au/news/communications/0,2000061791,39188135,00.htm - ferg -- Edward Lewis <Ed.Lewis(a)neustar.biz> wrote: If we can't make it easy to get to happy hour, how are we going to make the Internet safe? -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

Another panix.com scenario? Hushmail this time
by ops.lists＠gmail.com 27 Apr '05

27 Apr '05

<http://www.theregister.co.uk/2005/04/25/hushmail_dns_attack/> "Surfers trying to visit the web site of popular secure email service Hushmail were redirected to a false site early Sunday following a hacking attack. Hush Communications said hackers changed Hushmail's DNS records after "compromising the security" of its domain registrar (Network Solutions). These changes were undone after a few hours on Sunday and normal Hushmail services have now been restored."

2 1

Re: Schneier: ISPs should bear security burden
by Greg Boehnlein 27 Apr '05

27 Apr '05

On Wed, 27 Apr 2005, Brad Knowles wrote: > At 8:13 AM -0400 2005-04-27, Greg Boehnlein wrote: > > > As for security, intelligent ISPs will be monitoring their network and > > will have sensors in place to alert them to abnormal traffic (NetFlow, > > Snort, SNMP Traps, Log watchers) patterns and take action, but that does > > NOT extend to enforcing a security policy on the public without their > > consent. > > This assumes intelligence on the part of ISPs. This is no more > valid than assuming that all users are intelligent. No, it assumes that some ISPs are intelligent and that they will do what is neccessary. Darwinism will take care of the less intelligent. ;) -- Vice President of N2Net, a New Age Consulting Service, Inc. Company http://www.n2net.net Where everything clicks into place! KP-216-121-ST

1 0