[52977] in North American Network Operators' Group
Re: DNS issues various
daemon@ATHENA.MIT.EDU (Rob Thomas)
Thu Oct 24 17:04:20 2002
Date: Thu, 24 Oct 2002 16:02:09 -0500 (CDT)
From: Rob Thomas <robt@cymru.com>
To: NANOG <nanog@merit.edu>
In-Reply-To: <18170000.1035492668@discus.blue.cert.org>
Errors-To: owner-nanog-outgoing@merit.edu
Hi, NANOGers.
] I assert this is not the case. A significant percentage of DDoS attacks use
] legitimate source IP addresses. When there are thousands of throw-away hosts
I track several botnets per week, and a large amount of DDoS per week.
Only around 20% (or a bit less) of all the attacks I log use spoofed
source addresses.
Does anti-spoofing help? Yes. It is but one of many mitigation
strategies.
Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);
