[181971] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Possible Sudden Uptick in ASA DOS?

daemon@ATHENA.MIT.EDU (Roland Dobbins)
Thu Jul 9 04:14:00 2015

X-Original-To: nanog@nanog.org
From: "Roland Dobbins" <rdobbins@arbor.net>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Thu, 09 Jul 2015 02:24:32 +0700
In-Reply-To: <a75c75bfcd2b47caa6a659b3b00c4875@MIEXMBVM1.metro-inet.us>
Errors-To: nanog-bounces@nanog.org

On 9 Jul 2015, at 0:43, Mark Mayfield wrote:

> However, this makes me consider the need to more aggressively ACL 
> inbound traffic at the router level before these particular firewalls, 
> which I can do, and may help mitigate such events,

Spot-on - reduce the state-surface as much as possible.

> so thank you for the reminder!

Sorry for the repeat, but glad the preso was helpful!

;>

-----------------------------------
Roland Dobbins <rdobbins@arbor.net>

home help back first fref pref prev next nref lref last post