[16446] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: filtering spoofed addresses cheaply

daemon@ATHENA.MIT.EDU (Randy Bush)
Sun Apr 26 02:54:29 1998

Date: Sat, 25 Apr 98 23:47 PDT
From: Randy Bush <randy@psg.com>
To: William Allen Simpson <wsimpson@greendragon.com>
Cc: nanog@merit.edu

one view is that the clue is in the core where it is too late to fix it.
and the place it needs to be fixed is at the edges, where the tools are weak
and the clues seem (given empirical evidence) too few and far apart.  this
will change very slowly as market forces move clue toward the edges (on the
backs of flying pigs) or the edges wither.

another view is that the site of the cause is not where the pain of the
effect is felt.  hence the incentive to fix is small.  this would seem only
susceptible to vigilante acts, which is not cool.  better ideas welcome.

randy

home help back first fref pref prev next nref lref last post