🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #1114

Re: ISPs can easily decrease net abuse

#1114
From: Bit Twister
Date: Mon, 01 Dec 2003 16:48
36 lines
2622 bytes
On 1 Dec 2003 16:12:44 GMT, Jem Berkes wrote:
> As I'm sure lots of you are aware, cable/DSL machines are infected by 
> viruses and worms like nothing else. They become sources of email viruses 
> and other types of malicious traffic.

I think the current estimate is 400,000 to 500,000 still infected.
http://www.dshield.org/ can show you top 10 malware ports
and possible solution.

> 
> Then something occurred to me. Wouldn't it help dramatically if ISPs 
> delegated static IP addresses for any kind of permanent connectivity? This 
> way, customers' addresses would stay constant and make them easier to track 
> down:

I bought my cable connection from @home.com, I was sold to attbi.com, then I
was purchased by comcast.com and I think my dhcp ip has changed
twice. Pretty static for dhcp.


> 3) Infected hosts that are spewing worms by any method could be 
> automatically blocked by routers/gateways, since the IP address is constant

I agree. I wish that kind of trap software would flag the ip to the dhcp
server which would expire their lease.

The new ip renewal would give the infected ip dns and transparent
proxy servers which would route everything to an infected notice web page.

That page would indicate why they are seeing the "you are Infected"
web page. It can give possible solutions for the fix.  User can click
ok, to tell the trap software to clear the infected flag to allow the
user to get back on the net for another 24 hours.

ISP's customers would be happier because their internet experience would
be faster do to less malicious traffic.
Technical Details
Message-ID: <slrnbsms2i.2jm.BitTwister@wb.home>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.mathworks.com!wn13feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi_feed4!attbi.com!attbi_s01.POSTED!not-for-mail
References: <Xns944467F028317jbuserspc9org@130.179.16.24>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10c8f2,17f958067a510d3b
X-Google-Attributes: gid10c8f2,public
X-Google-Thread: ff723,17f958067a510d3b
X-Google-Attributes: gidff723,public
X-Google-ArrivalTime: 2003-12-01 08:48:47 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.mathworks.com!wn13feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi_feed4!attbi.com!attbi_s01.POSTED!not-for-mail
Newsgroups: comp.security.misc,can.internet.highspeed
From: Bit Twister <BitTwister@localhost.localdomain>
Subject: Re: ISPs can easily decrease net abuse
References: <Xns944467F028317jbuserspc9org@130.179.16.24>
Organization: home user
Message-ID: <slrnbsms2i.2jm.BitTwister@wb.home>
User-Agent: slrn/0.9.7.4 (Linux)
Lines: 36
NNTP-Posting-Host: 24.1.212.248
X-Complaints-To: abuse@comcast.net
X-Trace: attbi_s01 1070297325 24.1.212.248 (Mon, 01 Dec 2003 16:48:45 GMT)
NNTP-Posting-Date: Mon, 01 Dec 2003 16:48:45 GMT
Date: Mon, 01 Dec 2003 16:48:45 GMT