[Chapter-delegates] Net Stability

[shears at isoc.org]

Hi all,

Perhaps an off the wall idea, but would it be possible to do a sort of
walk-through tutorial to address this issue that we post on the ISOC
website(s) and point people to?  Or would it be to complex, unsuited for
this typed of approach?

Matthew




-----Original Message-----
From: chapter-delegates at elists.isoc.org
Sent: Fri, May 12, 2006 10:39
To: "Narelle Clark" <Narelle.Clark at optus.com.au>
Cc: chapter-delegates at elists.isoc.org
Subject: Re: [Chapter-delegates] Net Stability

Narelle Clark wrote:
> http://www.lightbluetouchpaper.org/2006/04/07/when-firmware-attacks-ddos
> -by-d-link
>
> I recall seeing this before:
> http://www.cs.wisc.edu/~plonka/netgear-sntp/ gives a really lengthy
> account of other manufacturers and what befell the Australian national
> NTP server. I recall that had to be blocked at the carrier/IAP level.
>
Dear Narelle,

While I agree with you, this has nothing to do with RFC compliance, but
rather with an impolite behaviour and a bad implementation on the side
of Netgear and Dlink..
> Certifying Internet appliance and software?
>
> A darn good idea.
> Start at the latest RFC# and work backwards... There's a massive amount
> of non compliance! With some services/systems being more detrimental
> than others.
What compliance ? A practical example.One could most probably certify
Sendmail/Postfix/Exim, etc as being RFC compliant. But if the
implementation on my local system allows pre-greeting traffic, it breaks
RFC2821. But OK, I could tell my boss that I cannot be blamed, since I
am using a certified RFC compliant MTA.

As for starting with the latest RFCs, I have mixed feelings. The latest
ones may not be implemented yet. There are older and critical services
like SMTP and DNS where non-compliance is common (mostly because of
lousy admins) that need to be addressed first, IMHO. Rather than
certifying software, we should try to certify people or groups of people
(ie companies).

Best regards,

Patrick Vande Walle


_______________________________________________
Chapter-delegates mailing list
Chapter-delegates at elists.isoc.org
http://elists.isoc.org/mailman/listinfo/chapter-delegates