Re: [fw-wiz] handy list of undesireble foreign networks

From: Tony Miedaner (miedanerat_private)
Date: Mon Jun 04 2001 - 06:10:45 PDT

  • Next message: Ofir Arkin: "[fw-wiz] Research Paper - ICMP Usage In Scanning v3.0 - RELEASED"

    I seriously doubt you will the cooperation of any nations on the US "list" if you are a US based entity.
    
    arkat_private wrote:
    
    > -----BEGIN PGP SIGNED MESSAGE-----
    >
    > nuqneH,
    >
    > - From my expirience there is no such thing as uncooperative nations - there
    > are uncooperative organizations all around the world and that does matter.
    >
    > There is major problem with some asian companies including ISPs who do not have abuse service that have english skills good enough to communicate and this seem
    > to be most annoying. But there are really few who are not _willing_ to cooperate.
    > Could you please name at least _one_ _country_ that causes trouble on the net?
    >
    > Tony Miedaner <miedanerat_private> said :
    >
    > > Hostile and uncooperative nations probably should be filtered as they could become a
    > > haven for hackers (and probably are) for whatever reasons - I think this does reduce
    > > the threat in a way.  At a minimum it would be useful to identify these networks on
    > > an IDS system, IMHO.
    > >
    > > Going out on a limb here you could argue that countries where there could be no
    > > cooperation in pursuing computer criminals should be blocked.  It would be far safer
    > > for a US based person to launch a US directed attack from a machine in a foreign
    > > country that is hostile to the US.
    > >
    > > There is another side to this I suppose in that the size and fragmentation of the
    > > networks may make such a list impossible to implement except possibly in an IDS
    > > system.
    > >
    > > arkat_private wrote:
    > >
    > > > -----BEGIN PGP SIGNED MESSAGE-----
    > > >
    > > > nuqneH,
    > > >
    > > > I think the whole idea is not good at all. Poorly protected
    > > > cable tv or *dsl users, ill-behaving ISP or something else like that are no less
    > > > treat to Internet security. There is no reason to maintain a list of "hostile
    > > > national networks" if an intruder can bypass any rules by hacking into US-based
    > > > system and then go wherever he wants.
    > > >
    > > > "Bowden, Kevin" <bowden_kwat_private> said :
    > > >
    > > > > In our last NIPC Chapter meeting we asked for just such a list.  We thought
    > > > > the FBI would be a good source for this information.  It may be that the
    > > > > information will only be available to those who have cleared their screening
    > > > > process.  That is of course assuming that the information is available and
    > > > > provided at all.  Besides this, I have had no luck finding other sources for
    > > > > this data other than keeping an eye on the news and doing my own
    > > > > cyber-sleuthing.
    > > > >
    > > > > Kevin
    > > > >
    > > > >  -----Original Message-----
    > > > > From:         Tony Miedaner [mailto:miedanerat_private]
    > > > > Sent: Monday, May 28, 2001 2:03 PM
    > > > > To:   firewall-wizardsat_private
    > > > > Subject:      [fw-wiz] handy list of undesireble foreign networks
    > > > >
    > > > > Hi folks,
    > > > >
    > > > > Any body know where I can get a quick list of networks used in various
    > > > > non-friendly foriegn nations?  I know it would not be perfect (because
    > > > > of provider allocation) but something that could be used as a baseline
    > > > > for screening evil and such.  Any RTBL or ORBS type lists out there for
    > > > > general tcp/ip traffic?
    >
    >                                      _     _  _  _  _      _  _
    >  {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
    >  (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
    >  [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!
    >
    > -----BEGIN PGP SIGNATURE-----
    > Version: PGP 6.5.1i
    >
    > iQCVAwUBOxtvDKH/mIJW9LeBAQF5zAP9He6wqTvBi4vTHKGb4P/8WPU7pD2gVqTW
    > aHgbSn/P0hOARCPKvk0GFEbcg+7h5z/eDfCETU3vo2SiBLDxscVdqSkhV1bdxWbL
    > OKL/Xz8RT+dc8UhSsQa8Rus4y9zCZCdnIgSWUMkWXwU0eH9QPzmRHF0KoXqdo/CH
    > dxmyuv8cY7E=
    > =MqEk
    > -----END PGP SIGNATURE-----
    
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizardsat_private
    http://www.nfr.com/mailman/listinfo/firewall-wizards
    



    This archive was generated by hypermail 2b30 : Mon Jun 04 2001 - 19:41:10 PDT