[120907] in North American Network Operators' Group
Re: I don't need no stinking firewall!
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Wed Jan 6 03:24:34 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Wed, 6 Jan 2010 08:17:28 +0000
In-Reply-To: <1262765000.6710.26.camel@petrie>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 6, 2010, at 3:03 PM, William Pitcock wrote:
> So, in fact, all incoming packets should
> be considered unsolicited until proven otherwise.
Concur - it works this way, as well. At one extreme, completely pathologic=
al, at the other extreme, perfectly normal - just faux.
;>
> It should be mentioned that DDoS mitigation gear in use on that network l=
et those packets through without even alerting us about it.
This is where baselining and anomaly-detection can come into play, along wi=
th an understanding of valid/invalid states, if the system is designed corr=
ectly, heh.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
