[164800] in North American Network Operators' Group
Re: ddos attacks
daemon@ATHENA.MIT.EDU (Patrick W. Gilmore)
Fri Aug 2 10:40:55 2013
From: "Patrick W. Gilmore" <patrick@ianai.net>
In-Reply-To: <bd98b34eddcb6a695aad64ceaf9fca75@mail.airstreamcomm.net>
Date: Fri, 2 Aug 2013 10:38:15 -0400
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_D1F37909-4038-4064-B0B3-1D954C3AAB7D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=windows-1252
On Aug 02, 2013, at 09:37 , sgraun@airstreamcomm.net wrote:
> I=92m curious to know what other service providers are doing to =
alleviate/prevent ddos attacks from happening in your network. Are you =
completely reactive and block as many addresses as possible or null0 =
traffic to the effected host until it stops or do you block certain =
ports to prevent them. What=92s the best way people are dealing with =
them?
#1: Ensure your network is BCP38 compliant.
Hard to complain about others attacking you when you are not clear. And =
if you do not block source-address spoofing, you are not clean.
As for the rest, I'll let others with more recent experience explain =
what they do.
--=20
TTFN,
patrick
--Apple-Mail=_D1F37909-4038-4064-B0B3-1D954C3AAB7D
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBAgAGBQJR+8RXAAoJEHZX8udmu5TXMeIIAIH/gLpQzNvvYKJPaI+tfife
dCDUNPHf7YukCRgcr/BLvL+sQbG7WZzO70L6bRyTuxn6nz/KDhsx8TpBbo3EEmc6
N5ydggB+Ty1FMEFSX0/VZblFGafNpmfzzsDD4lonwJOqqrVm1AJMkkoopiWZmF2f
sdAsTHTZnhUaSUCKLV/aoiDnAv8g5V2llnnFhioY4gqd6mXN6P+E4/SfjViZrLPM
4SL4Jil3cY4C2sVSQW0gn4ghG2T1YPvAIfKRPannMRIcMGiTfYgxHgfLhYebXWPI
8mTyMWaZaGKcglGxLqp/ZsBDPGnMxmZHaRebimmb8/7OJFHp48h99LOSI1dzZs4=
=SLWp
-----END PGP SIGNATURE-----
--Apple-Mail=_D1F37909-4038-4064-B0B3-1D954C3AAB7D--