[4332] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SYN floods (was: does history repeat itself?)

daemon@ATHENA.MIT.EDU (Justin W. Newton)
Thu Sep 12 15:15:42 1996

Date: Thu, 12 Sep 1996 15:24:33 -0400
To: Avi Freedman <freedman@netaxs.com>,
        stpeters@netheaven.com (Dick St.Peters)
From: "Justin W. Newton" <justin@erols.com>
Cc: nanog@merit.edu

At 09:08 PM 9/9/96 -0400, Avi Freedman wrote:
>This is *exactly* the right thing to do; every provider which does
>not provide complicated transit (which excludes even certain regionals,
>alas) should do this at their borders if they don't do it at each customer
>connect.
>
>And everyone should at least filter on each customer 56k/t1/etc...
>I know router cycles are tight but it might *really* become
>imperative...

Am I missing something....

If I am announcing a network via BGP I am more or less agreeing to carry
traffic for it.  If I am not I am not.  Therefore, if I filter based on my
outbound BGP announcements and do not allow any packets which have a source
address not originating from a network in my BGP announcements then I
should not be causing any harm to the networks which I am providing
connectivity to.  This has the added benefit of stopping people from
defaulting into me at exchange points as I will not carry that traffic
across my backbone.  I'd love to hear the holes in this theory.

Justin Newton
Internet Architect
Erol's Internet Services

home help back first fref pref prev next nref lref last post