[161493] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [c-nsp] DNS amplification

daemon@ATHENA.MIT.EDU (Masataka Ohta)
Mon Mar 18 01:02:09 2013

Date: Mon, 18 Mar 2013 14:01:34 +0900
From: Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>
To: nanog@nanog.org
In-Reply-To: <5145E22D.20305@gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Arturo Servin wrote:

> 	Yes, BCP38 is the solution.

It is not a solution at all, because it, instead, will promote
multihomed sites bloats the global routing table.

To really solve the problem in an end to end fashion, it is
necessary to require IGPs carry information for the proper
source address corresponding to each routing table entry in a
*FULL* routing table, which must be delivered to almost, if
not all, all the end systems.

						Masataka Ohta



home help back first fref pref prev next nref lref last post