Home page logo
/

nanog logo nanog mailing list archives

Re: relays.osirusoft.com
From: Chris Woodfield <rekoil () semihuman com>
Date: Wed, 27 Aug 2003 13:47:31 -0400

IIRC, it was Ron Guilmette who did this for a BL zone he was operating a long time ago, 
but it happened six months or so after he had deactivated the zone and was still 
getting numerous queries for it. So he reactivated the zone, answering 127.0.0.2 for 
every query, to get those people to stop. He also posted his intentions to SPAM-L 
and NANAE at least a few weeks in advance. Still a BOFHish move, but at least there was 
plenty of warning.

-C

On Wed, Aug 27, 2003 at 01:36:54PM -0400, Nathan J. Mehl wrote:

In the immortal words of Richard Welty (rwelty () averillpark net):

On Tue, 26 Aug 2003 15:25:46 -0700 (PDT) "Gary E. Miller" <gem () rellim com> wrote:
returning 127.0.0.2 for everything would be an ugly way to bow out.

yes, but it's been done before.

And oddly enough, it was a terrible idea the first time, and hasn't
gotten any better in the intervening months.  I suppose going down in
a blaze of glory might be appealing in the sleep-deprived haze of the
tail end of a multi-week DDOS attack, but PLEASE.  Null-route the
netblock and be done with it.  Returning 127.0.0.2 for every query
does NOTHING but convince more people that volunteer blacklist
providers like SPEWS are more trouble than they're worth.

-n

------------------------------------------------------------<memory () blank org>
"Must I pray in Hebrew?" No, and wipe that look of terror off your face. 
Fluency in Hebrew, of course, is vital to the proper understanding of Israeli 
truck driver insults.     (--David Bader, "How to Be an Extremely Reform Jew")
<http://blank.org/memory/>----------------------------------------------------

Attachment: _bin
Description:


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault