To: Frank A. Coluccio who wrote (2655 ) 4/30/2001 8:36:34 PM From: Frank A. Coluccio Respond to of 46821 Some responses from ISPs to the contents of the previous post [#2655]: -------- "How quickly can CN be firewalled anyway?" -------- > How quickly can CN be firewalled anyway? "As quickly as you can write route-map filters" -------- "About as long as it takes to add an import filter on your router?" -------- "i don't know that it will be that easy. surely, not all of china connects through a single AS. as well, i suspect that the same hackers would be able to manage a dial-up into some extra-china ISP." -------- > Time to drop AS4134. "That might backfire. If they learn that the only way to get stuff through is for it to not come from AS4134, thye might try to make it appear to come from elsewhere. We might all learn just what sort of BGP filters AS4134's neighbors have applied ..." --------- "The folks in the US who counterattack might be well advised to reconsider doing so. I would imagine that traffic from the US would be closely monitored. Any new hacking tricks that these counterattacks might use would then be recorded and analyzed. These techniques could then be used by them to further attack the US." -------- "Is it worthwhile to bother given the low rate and relatively low proficiency of attacks so far? They're trying to make a statement, sure, and doing some vandalism in the process. But it doesn't appear from any firsthand reports I have or news reports I've seen so far that any serious damage has been done anywhere. Dropping a country due to annoyance is a pretty serious step. If their ministry were directly encouraging all out serious attacks that would be a different thing, but I don't see any justification to do anything yet. Feel free to correct above impression of damage if you have better info than I do so far." -------- " just love the way (some) Americans bleat about their supposed constitutional rights to have their packets passed between any given pair of networks, but (perhaps others) are quite happy to route-map out entire subcontinents on the basis there might be a few (i.e. statistically insignificant number of) trouble makers there... Somehow I just can't imagine someone suggesting AOL / Earthlink (& I've seen plenty of 'interesting' packets from there) are blackholed for the same reason would get away with this on NANOG." --------- > I just love the way (some) Americans bleat about their > supposed constitutional rights to have their packets > passed between any given pair of networks, but (perhaps > others) are quite happy to route-map out entire > subcontinents on the basis there might be a few > (i.e. statistically insignificant number of) > trouble makers there... "AS4134 is totally black hat. 100% rogue and haven for spammers and crackers. They have a bogus replybot which gives automated bullshit excuses to abuse reports." > Somehow I just can't imagine someone suggesting AOL / Earthlink > (& I've seen plenty of 'interesting' packets > from there) are blackholed for the same reason > would get away with this on NANOG. "because aol/earthlink actually bother to respond to abuse reports (albeit slowly). AS4134 basically tells you to f--- off and eat your spam and tolerate their script kiddies." --------- "Is that the right AS number? ARIN and APNIC have no knowledge of it... RIPE says: as-block: AS3354 - AS4607 descr: ARIN ASN block remarks: These AS numbers are further assigned by ARIN remarks: to ARIN members and end-users in the ARIN --------- " 'cant block them all, so might as well block none' "? "Why make script kiddies life easier?" --------- > The folks in the US who counterattack might be well advised to > reconsider doing so. I would imagine that traffic from the US would > be closely monitored. Any new hacking tricks that these > counterattacks might use would then be recorded and analyzed. These > techniques could then be used by them to further attack the US. "Oh for the love of god, 15 web sites get defaced and it's suddenly worth trying to deny internet access to a billion people?" "They watch a story on the news, and think "wouldn't it be kewl if...". Any excuse or boredom will do, and then the media blows it out of proportion because it makes for an interesting story. I bet it's probably the same number of hacks that you'd see on a normal day, just against another country's www..gov's instead of their own." ---------