[3429] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Ping flooding

daemon@ATHENA.MIT.EDU (Jerry Anderson)
Thu Jul 11 13:24:18 1996

From: Jerry Anderson <jerry@gi.net>
To: avg@ncube.com (Vadim Antonov)
Date: Thu, 11 Jul 1996 12:17:39 -0500 (CDT)
Cc: nanog@merit.edu (North American Network Operators Group)
In-Reply-To: <9607100012.AA20670@butler.ncube.com> from "Vadim Antonov" at Jul 9, 96 05:12:43 pm

> That's once again a matter of defaults -- routers should _by
> default_  discard all packets from interfaces which they won't
> use for forwarding those packets back.

This is a sweeping statement.  I'm not sure we should buy into it
without thinking about it pretty hard.  However, I am no routing
theorist, so maybe this has already been thoroughly explored by
the high-level networking gurus.

I see three obvious advantages:

    1.  Prevention of IP spoofing.
    2.  Prevention of asymmetric routing.
    3.  Better TCP windowing and better performance when all
        packets follow the same path.

However, are the benefits worth the overhead?  What are the
effects on network redundancy?  What other issues am I
overlooking?

--
Jerry Anderson                                       jerry@gi.net
Principal Engineer                                 (402) 436-3030
Implementation & Consulting               http://www.gi.net/jerry
   Global Internet Network Services (formerly known as MIDnet)

home help back first fref pref prev next nref lref last post