[164800] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: ddos attacks

daemon@ATHENA.MIT.EDU (Patrick W. Gilmore)
Fri Aug 2 10:40:55 2013

From: "Patrick W. Gilmore" <patrick@ianai.net>
In-Reply-To: <bd98b34eddcb6a695aad64ceaf9fca75@mail.airstreamcomm.net>
Date: Fri, 2 Aug 2013 10:38:15 -0400
To: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


--Apple-Mail=_D1F37909-4038-4064-B0B3-1D954C3AAB7D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

On Aug 02, 2013, at 09:37 , sgraun@airstreamcomm.net wrote:

> I=92m curious to know what other service providers are doing to =
alleviate/prevent ddos attacks from happening in your network.  Are you =
completely reactive and block as many addresses as possible or null0 =
traffic to the effected host until it stops or do you block certain =
ports to prevent them.  What=92s the best way people are dealing with =
them?

#1: Ensure your network is BCP38 compliant.

Hard to complain about others attacking you when you are not clear. And =
if you do not block source-address spoofing, you are not clean.

As for the rest, I'll let others with more recent experience explain =
what they do.

--=20
TTFN,
patrick


--Apple-Mail=_D1F37909-4038-4064-B0B3-1D954C3AAB7D
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJR+8RXAAoJEHZX8udmu5TXMeIIAIH/gLpQzNvvYKJPaI+tfife
dCDUNPHf7YukCRgcr/BLvL+sQbG7WZzO70L6bRyTuxn6nz/KDhsx8TpBbo3EEmc6
N5ydggB+Ty1FMEFSX0/VZblFGafNpmfzzsDD4lonwJOqqrVm1AJMkkoopiWZmF2f
sdAsTHTZnhUaSUCKLV/aoiDnAv8g5V2llnnFhioY4gqd6mXN6P+E4/SfjViZrLPM
4SL4Jil3cY4C2sVSQW0gn4ghG2T1YPvAIfKRPannMRIcMGiTfYgxHgfLhYebXWPI
8mTyMWaZaGKcglGxLqp/ZsBDPGnMxmZHaRebimmb8/7OJFHp48h99LOSI1dzZs4=
=SLWp
-----END PGP SIGNATURE-----

--Apple-Mail=_D1F37909-4038-4064-B0B3-1D954C3AAB7D--


home help back first fref pref prev next nref lref last post