[nsp-sec] How to get a global K-line?

[Ariel Biener]

On Monday, 24 בMarch 2008 23:10, Rob Thomas wrote:
> ----------- nsp-security Confidential --------

Sorry for top posting. To add my 2 cents to Rob's reply, I fail
to see how you requesting (and this is on behalf of your organization)
that all IRC network operators k-line (or D: line in your case) your whole
address space is different from you blocking the relevant ports outbound
of your organization (except for it being worse).

If blocking is not politically correct for you, you must realize that your
request will leak out, be advertised, and then it will be even worse than
having the guts to block IRC and give the proper disclaimer to users
buying your service. I wouldn't wanna be the one who called the shots
on this decision when it gets advertised.
What would you say to users complaining that IRC doesn't work for them ? 
You'll say that it's not your fault, it's the IRC networks who wont allow them
in ?  And when the users send mail to these IRC networks, asking to be
allowed to use them, what would the IRC network operators be expected
to do ?  Lie ?

Unless I am missing something very important, this idea is bound to
backfire in the worst way.

--Ariel

> Hi, John.
>
> I'm not convinced that you want to do this, let alone maintain it, but
> if you do...
>
> You could join the irc-security list and chat up the various security
> contacts there.  Just about every major IRC network is represented
> there.  That said, lots of the smaller or more niche IRC networks are
> not represented there.  I'm not certain you'd find a lot of folks
> willing to add blocks for your address space, as these blocks can be
> heavy depending on the ircd, etc.
>
>     <http://lists.irc-unity.org/mailman/listinfo/irc-security>
>

-- 
 --
 Ariel Biener
 Technical Officer      tel: +972-3-6114094
 ISOC-IL                e-mail: ariel at isoc.org.il
 PGP: http://www.tau.ac.il/~ariel/pgp.html