Article View: comp.security.misc
Article #1114Re: ISPs can easily decrease net abuse
From: Bit Twister
Date: Mon, 01 Dec 2003 16:48
Date: Mon, 01 Dec 2003 16:48
36 lines
2622 bytes
2622 bytes
On 1 Dec 2003 16:12:44 GMT, Jem Berkes wrote: > As I'm sure lots of you are aware, cable/DSL machines are infected by > viruses and worms like nothing else. They become sources of email viruses > and other types of malicious traffic. I think the current estimate is 400,000 to 500,000 still infected. http://www.dshield.org/ can show you top 10 malware ports and possible solution. > > Then something occurred to me. Wouldn't it help dramatically if ISPs > delegated static IP addresses for any kind of permanent connectivity? This > way, customers' addresses would stay constant and make them easier to track > down: I bought my cable connection from @home.com, I was sold to attbi.com, then I was purchased by comcast.com and I think my dhcp ip has changed twice. Pretty static for dhcp. > 3) Infected hosts that are spewing worms by any method could be > automatically blocked by routers/gateways, since the IP address is constant I agree. I wish that kind of trap software would flag the ip to the dhcp server which would expire their lease. The new ip renewal would give the infected ip dns and transparent proxy servers which would route everything to an infected notice web page. That page would indicate why they are seeing the "you are Infected" web page. It can give possible solutions for the fix. User can click ok, to tell the trap software to clear the infected flag to allow the user to get back on the net for another 24 hours. ISP's customers would be happier because their internet experience would be faster do to less malicious traffic.
Technical Details
Message-ID:
<slrnbsms2i.2jm.BitTwister@wb.home>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.mathworks.com!wn13feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi_feed4!attbi.com!attbi_s01.POSTED!not-for-mailReferences:
<Xns944467F028317jbuserspc9org@130.179.16.24>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10c8f2,17f958067a510d3b X-Google-Attributes: gid10c8f2,public X-Google-Thread: ff723,17f958067a510d3b X-Google-Attributes: gidff723,public X-Google-ArrivalTime: 2003-12-01 08:48:47 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.mathworks.com!wn13feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi_feed4!attbi.com!attbi_s01.POSTED!not-for-mail Newsgroups: comp.security.misc,can.internet.highspeed From: Bit Twister <BitTwister@localhost.localdomain> Subject: Re: ISPs can easily decrease net abuse References: <Xns944467F028317jbuserspc9org@130.179.16.24> Organization: home user Message-ID: <slrnbsms2i.2jm.BitTwister@wb.home> User-Agent: slrn/0.9.7.4 (Linux) Lines: 36 NNTP-Posting-Host: 24.1.212.248 X-Complaints-To: abuse@comcast.net X-Trace: attbi_s01 1070297325 24.1.212.248 (Mon, 01 Dec 2003 16:48:45 GMT) NNTP-Posting-Date: Mon, 01 Dec 2003 16:48:45 GMT Date: Mon, 01 Dec 2003 16:48:45 GMT