ISPs can also help by policing their own networks. If a machine is spewing viruses, it ought to be shut down until it's cleaned up. But reporting such machines rarely gets any response from the ISP, which I assume is more worried about ticking off a customer than about the impact on the rest of the Internet.

ISPs are also long overdue to implement egress filtering, to keep forged packets from leaving their networks.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/193/23343#23343