[LINK] Storm Worm Botnet More Powerful Than Top Supercomputers

[Craig Sanders]

On Wed, Sep 12, 2007 at 01:47:16PM +0800, Adrian Chadd wrote:
> On Wed, Sep 12, 2007, Karl Auer wrote:
> 
> > for us, and it wasn't their problem they couldn't deliver it! This is
> > the ISP who handles routing our /24, mark you well, so they knew we were
> > not reachable. They failed to, or chose not to, advertise that fact
> > upstream, which would have stopped all that traffic ever being sent into
> > their net.
> 
> Routing isn't -that- simple. How and when should they choose not to
> advertise your subnet?

you've been in the ISP industry, you should know that there's a protocol
for handling such routing advertisements. it's called BGP. it's in
common, near-universal, use between ISP's routers.

e.g. i know (by running traceroute from my machine at work to my machine
at home) that my upstream ISP stops advertising my /24 if my adsl link
goes down. the traceroute peters out long before it gets to my ISP's
network....in fact, it stops as soon as it leaves my employer's network.

craig

-- 
craig sanders <cas at taz.net.au>

A truly wise man never plays leapfrog with a unicorn.