In message <199709171729.SAA00329@beckett.earlsfort.iol.ie>, Nick Hilliard writ es:
Remember, making their IP numbers useless is the hardest way we can hit them, get new IP# are not easy (the fact that you're on this mail-list means that you know that :-)
This is a bit off topic, but I disagree. If you're as unscrupulous as these guys, getting new IP numbers is as easy as this:
: interface Ethernet0 : ip address 219.1.1.1 255.255.0.0 : : router bgp xxxx : network 219.1.0.0 netmask 255.255.0.0 : : ip route 219.1.0.0 255.255.0.0 Null0 254
Hey presto: you've just got a /16 block which will probably get routed to most Internet sites. If the block doesn't get routed everywhere, it's not the end of the world. Hey, it's only spam -- 90% saturation is almost as good as 100%.
This is why we should filter on the AS number rather than the IP#. AS numbers and peering sessions are even harder to get than IP#... -- Poul-Henning Kamp FreeBSD coreteam member phk@FreeBSD.ORG "Real hackers run -current on their laptop."