Spammers hapless fate = ISP toil and sweat

In message <199709171729.SAA00329 at beckett.earlsfort.iol.ie>, Nick Hilliard writ
es:
>> Remember, making their IP numbers useless is the hardest way we can 
>> hit them, get new IP# are not easy (the fact that you're on this 
>> mail-list means that you know that :-)
>
>This is a bit off topic, but I disagree.  If you're as unscrupulous as these
>guys, getting new IP numbers is as easy as this:
>
>: interface Ethernet0
>:  ip address 219.1.1.1 255.255.0.0
>:
>: router bgp xxxx
>:  network 219.1.0.0 netmask 255.255.0.0
>:
>: ip route 219.1.0.0 255.255.0.0 Null0 254
>
>Hey presto:  you've just got a /16 block which will probably get routed to
>most Internet sites.  If the block doesn't get routed everywhere, it's not
>the end of the world.  Hey, it's only spam -- 90% saturation is almost as
>good as 100%.

This is why we should filter on the AS number rather than the IP#.

AS numbers and peering sessions are even harder to get than IP#...

--
Poul-Henning Kamp             FreeBSD coreteam member
phk at FreeBSD.ORG               "Real hackers run -current on their laptop."