[120802] in North American Network Operators' Group
Re: D/DoS mitigation hardware/software needed.
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Mon Jan 4 22:18:09 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Tue, 5 Jan 2010 03:15:42 +0000
In-Reply-To: <A6B03047-0B21-4335-8AAB-07F1DD7F1D11@arbor.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 5, 2010, at 10:14 AM, Dobbins, Roland wrote:
> If it's a stateful firewall, and state-tracking is turned on, it's quite =
possible to craft sufficient pathological traffic which conforms to the fir=
ewall policies and yet which leads to state-table inspection.
That should read 'state-table exhaustion', apologies for the typo.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
