[4249] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SYN floods (was: does history repeat itself?)

daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Mon Sep 9 21:44:21 1996

To: "Dick St.Peters" <stpeters@netheaven.com>
cc: nanog@merit.edu
In-reply-to: Your message of "Mon, 09 Sep 1996 20:34:49 EDT."
             <199609100034.UAA04936@saint.heaven.net> 
Reply-To: perry@piermont.com
Date: Mon, 09 Sep 1996 21:43:26 -0400
From: "Perry E. Metzger" <perry@piermont.com>


"Dick St.Peters" writes:
> My outbound filter blocks packets not from an address in my space.  Am
> I wrong in thinking this is the right thing for non-transit networks
> to do?

Yes, it is. If everyone on earth did this, it would make the problem
largely go away. I higly recommend that people implement it on a wide
scale.

Perry

home help back first fref pref prev next nref lref last post