[AusNOG] Telstra manipulating DNS to block botnets

[Christopher Pollock]

Just to drag the analogies back on topic a little more:

If you knew that a certain peer of yours was advertising a bad route to
you, let's say they're severely slowing down traffic for whatever reason.
 If you knew that a certain route being advertised to you, that was causing
suboptimal behaviour for you, your customers, and other peers to whom you
were re-advertising it, what would you do?

--
Christopher Pollock,
io Networks Pty Ltd.
e. chris at ionetworks.com.au
p. 1300 1 2 4 8 16
d. 07 3188 7588
m. 0410 747 765
skype: christopherpollock
twitter.com/chrisionetworks
http://www.ionetworks.com.au
In-house, Outsourced.



On Mon, Jun 18, 2012 at 10:31 AM, Rod Veith <rod at rb.net.au> wrote:

> DNS should not be an ISP problem.
>
> It seems to me that if the problem is killed off at the source (ie Domain
> registration and Nameservers), then a large proportion of the problem goes
> away.
> As many sources of infection are websites specifically built to infect PCs,
> who does have responsibility for policing the registrars? ICANN?
>
> If so, pressure should be increased to have at least one infection vector
> better controlled. There can be increasing penalties leading to eventually
> withdrawal of accreditation used against registrars if they continue to
> allow fraudulent domain name registrations and fail to act when notified of
> 'bad' websites. I imagine It wouldn't take too long once a few registrars
> were put out of business for the others to clean up their act and reduce
> the
> problem to more manageable levels.
>
> What I don't know is how we can increase pressure on ICANN to clean up the
> DNS system they have allowed to get out of control. Me saying something to
> them is not likely to work :(   Does anyone know of any practical way this
> can be achieved?
>
> Rod
>
>
> -----Original Message-----
> From: ausnog-bounces at lists.ausnog.net
> [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Eric Pinkerton
> Sent: Monday, 18 June 2012 9:47 AM
> To: ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] Telstra manipulating DNS to block botnets
>
> Let's also not forget, that it's more and more the case today that people
> have multiple machines connected to their home router including
> smartphones,
> laptops, DVD players, Tablets, Games Consoles, Media Centres etc etc - and
> so quarantining the entire connection because one of those machines is
> infected can be far more disruptive to your customers than it once was.
>
>
> Eric
> --
> Message  protected by MailGuard: e-mail anti-virus, anti-spam and content
> filtering.http://www.mailguard.com.au/mg
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20120618/475e8364/attachment.html>