[60240] in North American Network Operators' Group
Re: WANTED: ISPs with DDoS defense solutions
daemon@ATHENA.MIT.EDU (bdragon@gweep.net)
Mon Aug 4 17:35:54 2003
To: randy@psg.com (Randy Bush)
Date: Mon, 4 Aug 2003 17:35:19 -0400 (EDT)
Cc: nanog@merit.edu
In-Reply-To: <E19i50I-000PVB-0z@ran.psg.com> from "Randy Bush" at Jul 30, 2003 09:25:25 PM
From: bdragon@gweep.net
Errors-To: owner-nanog-outgoing@merit.edu
> >> Filtering the bogons does help, and everyone should perform anti-spoofing
> >> in the appropriate places. It isn't, however, a silver bullet.
> > it's necessary but not sufficient.
>
> anti-spoofing is useful, but vastly insufficient, and hence not necessary
>
> randy
anti-spoofing eliminates certain avenues of attack allowing one to focus
on remaining avenues, and hence (as Vix stated) is necessary but not
sufficient.