[4509] in North American Network Operators' Group
Re: router syn/syn-ack/ack alarming...
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Tue Sep 17 18:15:17 1996
To: Regis Donovan <regisdo@microsoft.com>
cc: "'nanog@merit.edu'" <nanog@merit.edu>
In-reply-to: Your message of "Tue, 17 Sep 1996 13:23:35 PDT."
<c=US%a=_%p=msft%l=RED-89-MSG-960917202335Z-16009@mail2.microsoft.com>
Reply-To: perry@piermont.com
Date: Tue, 17 Sep 1996 18:07:33 -0400
From: "Perry E. Metzger" <perry@piermont.com>
Regis Donovan writes:
> um... maybe i'm missing the clue here, but if the router vendors add
> something that shuts down an interface if the SYN/SYN-ACK/ACK ratio
> becomes too bad make it *easier* for me if i'm doing a denial of service
> attack on a host?
One could say that, yes...
Perry