mailing list archives
Hey, QWEST clean up your network
From: John Brown <jmbrown () chagresventures com>
Date: Thu, 28 Aug 2003 21:25:42 -0600
Seems like QWEST doesn't have any edge ACL's in place to deal
with this lovely worm issue.
Count Source Prexix, rounded up to a /16
2340 TOTAL Packets out of 2500 for 2 seconds
This is ICMP and TCP MS bad traffic for a 2500 packet
capture on a DS1 that is directly connected to Qwest.
Ergo, Qwest is the transit provider. Capture period
was about 2 seconds. ICK
According to Qwest Tech/Noc people they can't leave
filters up for more than 1 day.
Given that this worm has lasted more than 1 day, I'd
think its reasonable to leave filters up for say more
than one day ????
The other thing I learned from QWEST IP-NOC was that
it seems managment decided *NOT TO* filter packets related
to this worm issue at the edge......
AS 10480 and others
Re: Hey, QWEST clean up your network Randy Bush (Aug 29)
- Hey, QWEST clean up your network John Brown (Aug 29)