[121062] in North American Network Operators' Group
Re: D/DoS mitigation hardware/software needed.
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Sat Jan 9 10:10:22 2010
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Sat, 9 Jan 2010 15:03:21 +0000
In-Reply-To: <000601ca913c$0ff35130$2fd9f390$@net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 9, 2010, at 9:57 PM, Stefan Fouant wrote:
> Firewalls do have their place in DDoS mitigation scenarios, but if used a=
s
> the "ultimate" solution you're asking for trouble.
In my experience, their role is to fall over and die, without exception. I=
can't imagine what possible use a stateful firewall has being placed in fr=
ont of servers under normal conditions, much less during a DDoS attack; it =
just doesn't make sense.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
