Sean Donelan wrote:
As NANOG has experienced during the last several meetings, in any network used by a large number of people, there will be a certain percentage of people which bring infected computers into the network.
And it would be stupid not to be prepared for it. For wired networks, it's fairly straightforward, unfortunately many WLAN AP's require reboots to change access lists to kick parties out. The cycle from measurement and detection to removal can be automated and be very swift. We would be happy to assist clueful or less skilled parties in the processes. Level of automata should be tuned based on application, for example in conventions the guilty party is within reach while in large consumer networks incident-by-incident manual intervention is usually not an option. Pete
http://www.nytimes.com/2004/07/29/technology/circuits/29bost.html?pagewanted... Wiring a Convention, Version 2004 By SETH SCHIESEL Published: July 29, 2004 [...] But data services have not been as solid. Many news organizations suffered intermittent breakdowns in Internet service, and on Tuesday evening the main press pavilion was offline for about 90 minutes. A spokesman for Verizon said the company deliberately caused the interruption as part of an effort to root out a more deep-seated network problem, which the company said appeared to have been caused by a virus carried by network devices provided by news organizations. In the interim, a handful of data lines provided by other companies, including AT&T, served as a backup.