Re: [Asrg] ISP alliance on tackling zombies

["william(at)elan.net" <william at elan.net>]

On 23 Jul 2004, John Levine wrote:

> >Will US ISPs tackle zombie hosting if we come up with some
> >best practises here?
> >
> >Or is it just the case that unless ISPs are forced to comply,
> >progress on this issue will be slow?
> 
> Somewhere in between.  ISPs will implement best practices if beaten
> over the head with a stick and forced to do so, but it would simplify
> the process if there were agreed best practices for them to implement.

It depends on the solution we offer how willing ISPs would be to do it.
As you expect ISP is a business enterprise, and has to balance cost of 
upgrade with advantages and potential savings. 

Now it can be noted that with regular spammers directly using ISP provided
leased line and paying for it, ISP make money and so are relactunt to do 
something quickly and then external pressure is needed (and from that slow
reaction to abuse reports, comes perception that ISPs needs to be "beaten 
over the head"). 

But with zombies ISPs only loose money since they experience significant
support costs (users call and asks for help to clean up the machine),
plus to that cost of dealing with abuse reports and increase of load to
mail server (if zombie is relaying using ISP server, rather then sending 
email directly). 

So ISPs are quite willing to do something to stop zombie abuse. But solution
should be balanced, it should not cause loosing existing customers (i.e.
does not require offering limited internet service, that would give an edge to
competitor), it should be easy to implement and tech support and hardware
costs for upgrading should not exceed amounts lost due to presence of zombies
on ISP's net.

-- 
William Leibzon
Elan Networks
william at elan.net


_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg