[133277] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Over a decade of DDOS--any progress yet?

daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Tue Dec 7 23:47:01 2010

From: "Dobbins, Roland" <rdobbins@arbor.net>
To: North American Operators' Group <nanog@nanog.org>
Date: Wed, 8 Dec 2010 04:46:13 +0000
In-Reply-To: <alpine.GSO.2.00.1012072316130.25014@clifden.donelan.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Dec 8, 2010, at 11:26 AM, Sean Donelan wrote:

> Other than trying to hide your real address, what can be done to prevent =
DDOS in the first place.


DDoS is just a symptom.  The problem is botnets. =20

Preventing hosts from becoming bots in the first place and taking down exis=
ting botnets is the only way to actually *prevent* DDoS attacks.  Note that=
 prevention is distinct from *defending* oneself against DDoS attacks.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>

 	       Sell your computer and buy a guitar.






home help back first fref pref prev next nref lref last post