[60101] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: WANTED: ISPs with DDoS defense solutions

daemon@ATHENA.MIT.EDU (Rob Thomas)
Thu Jul 31 17:37:46 2003

Date: Thu, 31 Jul 2003 16:37:07 -0500 (CDT)
From: Rob Thomas <robt@cymru.com>
To: NANOG <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.44.0307311412540.20608-100000@pachabel.ednet.co.uk>
Errors-To: owner-nanog-outgoing@merit.edu


Hi, Rich.

] Do you have any ideas as to why that is?

The anti-spoofing filtering, while not ubiquitous, has had an effect.
The increase in the size of botnets is another reason.  The fact that
the number of vulnerable hosts has reached commodity level is perhaps
the primary reason.  The loss of 10K bots often introduces only the
most minor of delays.  :(

Regarding sophistication:  I never make the mistake of believing the
enemy is dumb.  I also do not believe the enemy will go further than
what is necessary to accomplish the mission.  Just enough is good
enough.

Thanks,
Rob.
-- 
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);



home help back first fref pref prev next nref lref last post