[AusNOG] Telstra manipulating DNS to block botnets

[Rod Veith]

DNS should not be an ISP problem.

It seems to me that if the problem is killed off at the source (ie Domain
registration and Nameservers), then a large proportion of the problem goes
away.
As many sources of infection are websites specifically built to infect PCs,
who does have responsibility for policing the registrars? ICANN? 

If so, pressure should be increased to have at least one infection vector
better controlled. There can be increasing penalties leading to eventually
withdrawal of accreditation used against registrars if they continue to
allow fraudulent domain name registrations and fail to act when notified of
'bad' websites. I imagine It wouldn't take too long once a few registrars
were put out of business for the others to clean up their act and reduce the
problem to more manageable levels. 

What I don't know is how we can increase pressure on ICANN to clean up the
DNS system they have allowed to get out of control. Me saying something to
them is not likely to work :(   Does anyone know of any practical way this
can be achieved? 

Rod


-----Original Message-----
From: ausnog-bounces at lists.ausnog.net
[mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Eric Pinkerton
Sent: Monday, 18 June 2012 9:47 AM
To: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Telstra manipulating DNS to block botnets

Let's also not forget, that it's more and more the case today that people
have multiple machines connected to their home router including smartphones,
laptops, DVD players, Tablets, Games Consoles, Media Centres etc etc - and
so quarantining the entire connection because one of those machines is
infected can be far more disruptive to your customers than it once was.


Eric
-- 
Message  protected by MailGuard: e-mail anti-virus, anti-spam and content
filtering.http://www.mailguard.com.au/mg

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog