Security

Ask something
Discussion Locked

National Deny Access DB

0 helpful
4 replies

by dwdino 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have been rolling around in my head doing something similiar to the Telemarketer Block List which went national today.

This list would be a list of all persons who launch attacks, misuse resources, or in some other way pose a threat to internetresources.

I have repeatedly forwarded my firewall logs to Comcast, Charter, Road Runner, Bell South, and others and have had these complaints fall on deaf ears all but once. I have become tired of these delinquents.

My hopes to start a publicly accessable database where logs could be kept of mischevious users. This would include any personal information which can be obtain and a log of what this person was doing. Then a panel of technical contributors would rule on the submittal; and if determined to be hostile activities, the information would be added to the DB for public reference.

In the end, I hope this type of system could be used by the ISPs to deny service to those known to proliferate such errant behavior.

Granted,a new generation of ISP would emerge to allow this miscreants access, but then would could just block that whole subnet.

I am posting this to get others opinions / ideas.

Thanks,

4 replies

by generalist

For this to work you had better have some VERY solid research behind it, otherwise you could get into big trouble when an innocent person or organization is placed on the list. The evidence you would need would have to hold up in court because thatis where it would end up, especially if a victimized business ends up on the list.

Still, one could always dream about being able to block the true scum of the Internet.

by mcarlsonus

Certainly accidentally getting an "innocent" on the list would be potential cause for a nasty lawsuit, but, as we've found out through the use of honeypots, quite apparently even the guilty, logged, and captured can claim they've been entrapped. Beever vigilant and, if you have a honeypot, don't tell anyone!

by dwdino

First, this would be a volunteer basis. ISP and other providers could check the list at their discresion. This is more of a way of saying, the following have been shown to behave "poorly".

Second, almost all firewalls of any value log the contents of packets, and most web servers do the same.

For instance, my home webserver runs a script which parses the logs and then generates a list of IP address which requested the "scripts" resource on IIS. I then take this list and generate complaints to each ISP regarding this misuse of service.

I am thinking of making this sort of information public. ISPs could check their current IP assignments against the database and find that "George" has been playing dirty.

We in know way would ever have the legal authority to refuse someone an Internet connection; but my hope is that ISPs would begin to check out the customers. We can do very little without have a credit check run against us nowadays. Why shouldn't the Internet be the same way with a behavior check?

by generalist

The credit check industry has a mechanism for disputing errors in your credit report. IF Internet behavior checks become common, then the Internet behavior check 'industry' would need the same mechanism for reporting and resolving errors on our behavior report.

What would be nice is if there were some way to make Internet identity spoofing a crime akin to identity theft. If you spoof somebody's Internet identity, they should have the right to take you to civil court and sue for libel at the minimum. And if your spoofing results in loss of business, money or time, your victim should be able to sue for damages.

If I'm going to be blamed for somebody else's bad behavior, I want to be able to 'nail' them to the wall if and when they are caught. And since I can't do that literally, doing it legally would be acceptable.

This discussion is closed to new replies.