To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Forward thinking.
I have only joined this list today so I would expect this has already been discussed so sorry if this is a repeat. I am hoping to generate discussion. How would it best to maintain a central database / list of known bot nets. Thinking about what has been used in the passed for similar technical problems. Bogon filtering springs to mind the filtering of Bogus traffic from IP ranges not yet assigned. Would enable us to auto generate ACLs, or BGP black holing pesky bot nets. But does not solve the problem and clever black hats could use this device against large corps. What I would not want to see is what has happened with SPAM, lots of companies maintaining there own list of known SPAMMERS blocking as they see fit. Perhaps something like dshield, where we would submit bot nets found. It would give us a central list and allow us to "discover trends and prepare better firewall rules" but it is reactive. What do we do with the centralized list beyond reporting trends. Do we then lobby the IP owner to clean up there network? What do others on the list think? Regards, Mat. ---------------------------------------------------------------- The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. If you have received this communication in error please return it to the sender, then delete and destroy any copies of it. ---------------------------------------------------------------- ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ _______________________________________________ botnets mailing list To report a botnet PRIVATELY please email: [EMAIL PROTECTED] http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
