From ???@??? Wed Jun 23 10:32:06 1999
To: srh@merit.edu
From: Dean Anderson <dean@av8.com>
Subject: Re: Internet failures over the next 3 years
Cc:
Bcc:
X-Attachments:
X-Eudora-Signature: <Standard>
X-Persona: <Av8>

This message did not go out to nanog. I subscribed and resubscribed to nanog.
and nanog-post. I don't get any response at all such as (you aren't authorized
to post or some such...) There seems to be something wrong.

Appreciate it if you can fix it.

Thanks,

--Dean

>Date: Wed, 23 Jun 1999 01:43:44 -0400
>To: Jeremy Porter <jerry@freeside.fc.net>, Alex Bligh <amb@gxn.net>
>From: Dean Anderson <dean@av8.com>
>Subject: Re: Internet failures over the next 3 years
>Cc: Tim Wolfe <tim@clipper.net>, Sean Donelan <SEAN@SDG.DRA.COM>, nanog@merit.edu, srh@merit
.edu
>
>I agree with Jeremy, that the problem is really due to the fact that people
> aren't tracked down, due to lack of tools or interest. I suggest that what
>is needed is not necessarilly better authentication (because its hard to
>back fit into existing protocols), but better auditing and law enforcement tools.
>
>The auditing and identification could be fixed by a trusted/authenticated
>method to start additional logging automatically, so that enough records
>are created to later identify the true source.
>
>Eg, you send an authenticated message to an administrative server at upstream,
>that is able to start logs for a particular source address on all or likely
>routers, to identify the source of the packets. If the source it another ISP,
>then it forwards the request on to that ISP. When security staff
>arrive, they know that an event occured, and have the logs.
>
>Remember in cuckoos egg, they really didn't start getting anywhere until
>they automated the process.
>
>My registry project machine isn't getting a lot of use right now, and I'll
>donate it as a development resource for such a project.
>
> --Dean