[60240] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: WANTED: ISPs with DDoS defense solutions

daemon@ATHENA.MIT.EDU (bdragon@gweep.net)
Mon Aug 4 17:35:54 2003

To: randy@psg.com (Randy Bush)
Date: Mon, 4 Aug 2003 17:35:19 -0400 (EDT)
Cc: nanog@merit.edu
In-Reply-To: <E19i50I-000PVB-0z@ran.psg.com> from "Randy Bush" at Jul 30, 2003 09:25:25 PM
From: bdragon@gweep.net
Errors-To: owner-nanog-outgoing@merit.edu


> >> Filtering the bogons does help, and everyone should perform anti-spoofing
> >> in the appropriate places.  It isn't, however, a silver bullet.
> > it's necessary but not sufficient.
> 
> anti-spoofing is useful, but vastly insufficient, and hence not necessary
> 
> randy

anti-spoofing eliminates certain avenues of attack allowing one to focus
on remaining avenues, and hence (as Vix stated) is necessary but not
sufficient.


home help back first fref pref prev next nref lref last post