[NANOG] Was: Code Red 2 cleanup -- SHOULD NSPs PULL THE PLUG? Solutions?

<--( SNIP )-->

Helu,

  In the case of a lot of networks that are affected by this problem in
particular, putting filters on your routers isn't a solution. It
localizes the problem, sure, however do you just let the problem continue
ad inifinitum?

  Also, the filtering of ingress/egress scanning attempts can be fairly
resource intensive and is a very short-term 'measure' ( I say measure,
because it doesn't offer a solution ). You might not 'return fire', but
you should probably be thinking further ahead to an ultimate solution. In
doing so, what are the possible solutions.. and how does elapsed time come
into play when determining which solution fits the situation?

  This extends past the Code Red debacle, and into the ethereal 'what
if?'.

.z